krb5 commit: Include etype-info in for hardware preauth hints

Greg Hudson <[email protected]>
Newsgroups gmane.comp.encryption.kerberos.cvs
Message-ID <[email protected]>
https://github.com/krb5/krb5/commit/ba92da05accc524b8037453b63ced1a6c65fd2a1
commit ba92da05accc524b8037453b63ced1a6c65fd2a1
Author: Greg Hudson <[email protected]>
Date:   Wed Jan 3 11:59:14 2018 -0500

    Include etype-info in for hardware preauth hints
    
    If a principal has the requires_hwauth bit set, include PA-ETYPE-INFO
    or PA-ETYPE-INFO2 padata in the PREAUTH_REQUIRED error, as preauth
    mechs involving hardware tokens may also use the principal's Kerberos
    password.
    
    ticket: 8629

 src/kdc/kdc_preauth.c |    4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/kdc/kdc_preauth.c b/src/kdc/kdc_preauth.c
index 81d0b8c..739c5e7 100644
--- a/src/kdc/kdc_preauth.c
+++ b/src/kdc/kdc_preauth.c
@@ -144,7 +144,7 @@ static preauth_system static_preauth_systems[] = {
     {
         "etype-info",
         KRB5_PADATA_ETYPE_INFO,
-        0,
+        PA_HARDWARE,
         NULL,
         NULL,
         NULL,
@@ -155,7 +155,7 @@ static preauth_system static_preauth_systems[] = {
     {
         "etype-info2",
         KRB5_PADATA_ETYPE_INFO2,
-        0,
+        PA_HARDWARE,
         NULL,
         NULL,
         NULL,
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.