Proposal: krb5_get_init_creds_opt_set_pa

Jeffrey Altman jaltman at secure-endpoints.com
Thu Dec 7 12:56:02 EST 2006


Kevin Coffman wrote:
> /* Generic preauth option attribute/value pairs */
> typedef struct _krb5_gic_opt_pa_data {
>     krb5_preauthtype pa_type;   /* pa_type this option applies to */
>     char *attr;
>     char *value;
> } krb5_gic_opt_pa_data;
> 
>  /*
>  * This function allows the caller to supply options to preauth
>  * plugins.  Preauth plugin modules are given a chance to look
>  * at the options at the time this function is called to check
>  * the validity of its options.
>  * The 'opt' pointer supplied to this function must have been
>  * obtained using krb5_get_init_creds_opt_alloc()
>  */
> krb5_error_code KRB5_CALLCONV
> krb5_get_init_creds_opt_set_pa(krb5_context context,
>                                krb5_get_init_creds_opt *opt,
>                                krb5_principal principal,
>                                const char *password,
>                                krb5_prompter_fct prompter,
>                                void *prompter_data,
>                                int num_preauth_data,
>                                krb5_gic_opt_pa_data *preauth_data);

If this is supposed to be a set_pa attribute function, why does it
look like krb5_get_init_creds_opt_with_password?




More information about the krbdev mailing list