[krbdev.mit.edu #9226] git commit

"Greg Hudson via RT" <[email protected]>
Newsgroups gmane.comp.encryption.kerberos.bugs
Message-ID <[email protected]>
Sat Aug 08 01:51:11 2026: Request 9226 was acted upon.
 Transaction: Ticket created by [email protected]
       Queue: krb5
     Subject: git commit
       Owner: [email protected]
  Requestors: 
      Status: new
 Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9226 >



Add auto_fast_armor realm variable

When auto_fast_armor is true and no FAST ccache name is provided in
the GIC options, use anonymous PKINIT to acquire an armor ticket into
a temporary memory ccache.  Refactor krb5int_fast_as_armor() and add
an armor_ccache parameter so that we can pass in the memory ccache
without modifying the caller's GIC options.

[[email protected]: edited commit messages, documentation, and comments;
refactored some code changes for simplicity]

https://github.com/krb5/krb5/commit/eaff3bcf1a43541208b1fa63a3df50c2080458b7
Author: jason34105533 <[email protected]>
Committer: Greg Hudson <[email protected]>
Commit: eaff3bcf1a43541208b1fa63a3df50c2080458b7
Branch: master
 doc/admin/conf_files/krb5_conf.rst |  11 ++++
 src/include/k5-int.h               |   1 +
 src/include/k5-trace.h             |   6 +-
 src/lib/krb5/krb/fast.c            |  79 ++++++++++++++------------
 src/lib/krb5/krb/fast.h            |   3 +-
 src/lib/krb5/krb/get_in_tkt.c      | 111 ++++++++++++++++++++++++++++++++++++-
 src/lib/krb5/krb/init_creds_ctx.h  |   4 ++
 src/tests/gssapi/t_gssapi.py       |  18 ++++++
 src/tests/t_pkinit.py              |  27 +++++++--
 9 files changed, 215 insertions(+), 45 deletions(-)
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.