Preauth plugin adding PA-FX-COOKIE

Alejandro Perez Mendez alex at um.es
Tue May 17 03:14:49 EDT 2011


Hi Linux.


I cannot tell you how it is suppoused to be done, but I can tell you how 
I did it :). To create the PA-FX-COOKIE PADATA just include it in the 
e-data element of the KRB_ERROR message, as you will do to generate any 
other "custom" PADATA.

Regards
Alejandro




El 16/05/11 11:43, Linus Nordberg escribió:
> Hi,
>
> How can a preauth plugin affect the pa-data cookie being returned in a
> KRB-ERROR?  It looks like a cookie is unconditionally created and added
> by get_preauth_hint_list() after the edata_proc function (get_edata) for
> the plugin has been invoked.
>
> Adding a get_cookie method to krb5plugin_preauth_server_ftable_v1 or
> adding a krb5_pa_data *pa_cookie argument to edata_proc would be two
> possible solutions.
>
> Thanks,
> Linus
>
> _______________________________________________
> krbdev mailing list             krbdev at mit.edu
> https://mailman.mit.edu/mailman/listinfo/krbdev



More information about the krbdev mailing list