krb5 commit: Add PA-REDHAT-IDP-OAUTH2 padata type

Greg Hudson ghudson at mit.edu
Wed Dec 29 22:20:37 EST 2021


https://github.com/krb5/krb5/commit/7f84f66e1a0c3877dd20fcf705182480cf00de0a
commit 7f84f66e1a0c3877dd20fcf705182480cf00de0a
Author: Pavel Březina <pbrezina at redhat.com>
Date:   Thu Dec 2 14:24:35 2021 +0100

    Add PA-REDHAT-IDP-OAUTH2 padata type
    
    Recognize the Red Hat IdP preauth mechanism in trace messages, and add
    a declaration for it in krb5.h.
    
    [ghudson at mit.edu: edited comment and commit message]
    
    ticket: 9041 (new)

 doc/appdev/refs/macros/index.rst |    1 +
 src/include/krb5/krb5.hin        |    1 +
 src/lib/krb5/os/trace.c          |    1 +
 3 files changed, 3 insertions(+), 0 deletions(-)

diff --git a/doc/appdev/refs/macros/index.rst b/doc/appdev/refs/macros/index.rst
index 21619b9..722ebbb 100644
--- a/doc/appdev/refs/macros/index.rst
+++ b/doc/appdev/refs/macros/index.rst
@@ -279,6 +279,7 @@ Public
    KRB5_PADATA_SAM_RESPONSE_2.rst
    KRB5_PADATA_SESAME.rst
    KRB5_PADATA_SPAKE.rst
+   KRB5_PADATA_REDHAT_IDP_OAUTH2.rst
    KRB5_PADATA_SVR_REFERRAL_INFO.rst
    KRB5_PADATA_TGS_REQ.rst
    KRB5_PADATA_USE_SPECIFIED_KVNO.rst
diff --git a/src/include/krb5/krb5.hin b/src/include/krb5/krb5.hin
index 5ebf5a7..79c66da 100644
--- a/src/include/krb5/krb5.hin
+++ b/src/include/krb5/krb5.hin
@@ -1847,6 +1847,7 @@ krb5_verify_checksum(krb5_context context, krb5_cksumtype ctype,
 #define KRB5_ENCPADATA_REQ_ENC_PA_REP   149 /**< RFC 6806 */
 #define KRB5_PADATA_AS_FRESHNESS        150 /**< RFC 8070 */
 #define KRB5_PADATA_SPAKE               151
+#define KRB5_PADATA_REDHAT_IDP_OAUTH2   152 /**< Red Hat IdP mechanism */
 #define KRB5_PADATA_PAC_OPTIONS         167 /**< MS-KILE and MS-SFU */
 
 #define KRB5_SAM_USE_SAD_AS_KEY         0x80000000
diff --git a/src/lib/krb5/os/trace.c b/src/lib/krb5/os/trace.c
index 59df450..3369fc4 100644
--- a/src/lib/krb5/os/trace.c
+++ b/src/lib/krb5/os/trace.c
@@ -164,6 +164,7 @@ padata_type_string(krb5_preauthtype type)
     case KRB5_ENCPADATA_REQ_ENC_PA_REP: return "PA-REQ-ENC-PA-REP";
     case KRB5_PADATA_AS_FRESHNESS: return "PA_AS_FRESHNESS";
     case KRB5_PADATA_SPAKE: return "PA-SPAKE";
+    case KRB5_PADATA_REDHAT_IDP_OAUTH2: return "PA-REDHAT-IDP-OAUTH2";
     default: return NULL;
     }
 }


More information about the cvs-krb5 mailing list