All current known uses of e_data are encoded as pa-data or typed-data. FAST requires that e_data be expressed as pa-data. Change the DAL and kdcpreauth interfaces so that e_data is returned as a sequence of pa-data elements. Add a preauth module flag to indicate that the sequence should be encoded as typed-data in non-FAST errors. https://github.com/krb5/krb5/commit/cbb4ede6d5a939f39f3325ad040406ac05c99713 Commit By: ghudson Revision: 25298 Changed Files: U trunk/src/include/kdb.h U trunk/src/include/krb5/preauth_plugin.h U trunk/src/kdc/do_as_req.c U trunk/src/kdc/do_tgs_req.c U trunk/src/kdc/kdc_preauth.c U trunk/src/kdc/kdc_util.c U trunk/src/kdc/kdc_util.h U trunk/src/kdc/policy.c U trunk/src/lib/kdb/Makefile.in U trunk/src/lib/kdb/kdb5.c U trunk/src/lib/krb5/libkrb5.exports U trunk/src/plugins/kdb/db2/kdb_db2.c U trunk/src/plugins/kdb/db2/kdb_db2.h U trunk/src/plugins/kdb/hdb/kdb_hdb.h U trunk/src/plugins/kdb/hdb/kdb_windc.c U trunk/src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap.c U trunk/src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap.h U trunk/src/plugins/preauth/pkinit/pkinit.h U trunk/src/plugins/preauth/pkinit/pkinit_crypto.h U trunk/src/plugins/preauth/pkinit/pkinit_crypto_openssl.c U trunk/src/plugins/preauth/pkinit/pkinit_lib.c U trunk/src/plugins/preauth/pkinit/pkinit_srv.c