oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

document flags to krb5_compare_creds()

Browse Source
This commit is contained in:
Love Hornquist Astrand
2009-09-06 11:45:25 -07:00
parent b7c329244c
commit e2cbb2d350
1 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
lib/krb5/creds.c
View File

@@ -183,6 +183,18 @@ krb5_times_equal(const krb5_times *a, const krb5_times *b)
* Return TRUE if `mcreds' and `creds' are equal (`whichfields'
* determines what equal means).
*
*
* The following flags, set in whichfields affects the comparison:
* - KRB5_TC_MATCH_SRV_NAMEONLY Consider all realms equal when comparing the service principal.
* - KRB5_TC_MATCH_KEYTYPE Compare enctypes.
* - KRB5_TC_MATCH_FLAGS_EXACT Make sure that the ticket flags are identical.
* - KRB5_TC_MATCH_FLAGS Make sure that all ticket flags set in mcreds are also present in creds .
* - KRB5_TC_MATCH_TIMES_EXACT Compares the ticket times exactly.
* - KRB5_TC_MATCH_TIMES Compares only the expiration times of the creds.
* - KRB5_TC_MATCH_AUTHDATA Compares the authdata fields.
* - KRB5_TC_MATCH_2ND_TKT Compares the second tickets (used by user-to-user authentication).
* - KRB5_TC_MATCH_IS_SKEY Compares the existance of the second ticket.
*
* @param context Kerberos 5 context.
* @param whichfields which fields to compare.
* @param mcreds cred to compare with.