[17122] in Kerberos-V5-bugs
[krbdev.mit.edu #9226] git commit
daemon@ATHENA.MIT.EDU (Greg Hudson via RT)
Sat Aug 8 01:51:18 2026
From: "Greg Hudson via RT" <rt-comment@krbdev.mit.edu>
In-Reply-To:
Message-ID: <rt-4.4.3-2-3901885-1786168271-375.9226-4-0@mit.edu>
To: "AdminCc of krbdev.mit.edu Ticket #9226":;
Date: Sat, 08 Aug 2026 01:51:11 -0400
MIME-Version: 1.0
Reply-To: rt-comment@krbdev.mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krb5-bugs-bounces@mit.edu
Sat Aug 08 01:51:11 2026: Request 9226 was acted upon.
Transaction: Ticket created by ghudson@mit.edu
Queue: krb5
Subject: git commit
Owner: ghudson@mit.edu
Requestors:
Status: new
Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9226 >
Add auto_fast_armor realm variable
When auto_fast_armor is true and no FAST ccache name is provided in
the GIC options, use anonymous PKINIT to acquire an armor ticket into
a temporary memory ccache. Refactor krb5int_fast_as_armor() and add
an armor_ccache parameter so that we can pass in the memory ccache
without modifying the caller's GIC options.
[ghudson@mit.edu: edited commit messages, documentation, and comments;
refactored some code changes for simplicity]
https://github.com/krb5/krb5/commit/eaff3bcf1a43541208b1fa63a3df50c2080458b7
Author: jason34105533 <a20040108jason@gmail.com>
Committer: Greg Hudson <ghudson@mit.edu>
Commit: eaff3bcf1a43541208b1fa63a3df50c2080458b7
Branch: master
doc/admin/conf_files/krb5_conf.rst | 11 ++++
src/include/k5-int.h | 1 +
src/include/k5-trace.h | 6 +-
src/lib/krb5/krb/fast.c | 79 ++++++++++++++------------
src/lib/krb5/krb/fast.h | 3 +-
src/lib/krb5/krb/get_in_tkt.c | 111 ++++++++++++++++++++++++++++++++++++-
src/lib/krb5/krb/init_creds_ctx.h | 4 ++
src/tests/gssapi/t_gssapi.py | 18 ++++++
src/tests/t_pkinit.py | 27 +++++++--
9 files changed, 215 insertions(+), 45 deletions(-)
_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs
