Luke Howard 49f3f5bd99 kdc: support for GSS-API pre-authentication ...

Add support for GSS-API pre-authentication to the KDC, using a simplified
variation of draft-perez-krb-wg-gss-preauth-02 that encodes GSS-API context
tokens directly in PADATA, and uses FX-COOKIE for state management.

More information on the protocol and implementation may be found in
lib/gssapi/preauth/README.md.

2021-08-12 17:37:01 +10:00

11 KiB

Raw Blame History

View Raw