[krbdev.mit.edu #9226] git commit

[Greg Hudson via RT]

Sat Aug 08 01:51:11 2026: Request 9226 was acted upon.
 Transaction: Ticket created by ghudson at mit.edu
       Queue: krb5
     Subject: git commit
       Owner: ghudson at mit.edu
  Requestors: 
      Status: new
 Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9226 >



Add auto_fast_armor realm variable

When auto_fast_armor is true and no FAST ccache name is provided in
the GIC options, use anonymous PKINIT to acquire an armor ticket into
a temporary memory ccache.  Refactor krb5int_fast_as_armor() and add
an armor_ccache parameter so that we can pass in the memory ccache
without modifying the caller's GIC options.

[ghudson at mit.edu: edited commit messages, documentation, and comments;
refactored some code changes for simplicity]

https://github.com/krb5/krb5/commit/eaff3bcf1a43541208b1fa63a3df50c2080458b7
Author: jason34105533 <a20040108jason at gmail.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: eaff3bcf1a43541208b1fa63a3df50c2080458b7
Branch: master
 doc/admin/conf_files/krb5_conf.rst |  11 ++++
 src/include/k5-int.h               |   1 +
 src/include/k5-trace.h             |   6 +-
 src/lib/krb5/krb/fast.c            |  79 ++++++++++++++------------
 src/lib/krb5/krb/fast.h            |   3 +-
 src/lib/krb5/krb/get_in_tkt.c      | 111 ++++++++++++++++++++++++++++++++++++-
 src/lib/krb5/krb/init_creds_ctx.h  |   4 ++
 src/tests/gssapi/t_gssapi.py       |  18 ++++++
 src/tests/t_pkinit.py              |  27 +++++++--
 9 files changed, 215 insertions(+), 45 deletions(-)