kdc: support for PAC_ATTRIBUTES_INFO

Add PAC_ATTRIBUTES_INFO to the PAC. This info buffer indicates whether the user
explicitly requested a PAC be present or absent.

Note: this changes the windc plugin ABI.
This commit is contained in:
Luke Howard
2021-12-20 15:31:33 +11:00
parent e50033aec2
commit f7964251ff
12 changed files with 268 additions and 95 deletions

View File

@@ -814,6 +814,7 @@ HEIMDAL_KRB5_2.0 {
_krb5_get_int;
_krb5_get_int64;
_krb5_pac_sign;
_krb5_pac_get_attributes_info;
_krb5_pac_get_canon_principal;
_krb5_kdc_pac_sign_ticket;
_krb5_kdc_pac_ticket_parse;
@@ -833,7 +834,6 @@ HEIMDAL_KRB5_2.0 {
_krb5_crypto_set_flags;
_krb5_make_pa_enc_challenge;
_krb5_validate_pa_enc_challenge;
_krb5_store_utf8_as_ucs2le_at_offset;
# kinit helper
krb5_get_init_creds_opt_set_pkinit_user_certs;