Ticket History #8879: Allow certauth modules to set hw-authent flag

# Thu Feb 27 15:23:31 2020 ghudson@mit.edu (Greg Hudson) - Ticket created

From:	ghudson@mit.edu
Subject:	git commit

Download (untitled) / with headers
text/plain 819B

Allow certauth modules to set hw-authent flag

In PKINIT, if a certauth module returns KRB5_CERTAUTH_HWAUTH from its
authorize method, set the hw-authent flag in the ticket.

https://github.com/krb5/krb5/commit/50fb43b4a2d97ce2cd53e1ced30e8e8224fede70
Author: Greg Hudson <ghudson@mit.edu>
Commit: 50fb43b4a2d97ce2cd53e1ced30e8e8224fede70
Branch: master
doc/plugindev/certauth.rst | 7 +++++--
src/include/krb5/certauth_plugin.h | 9 ++++++---
src/lib/krb5/error_tables/k5e1_err.et | 1 +
src/plugins/certauth/test/Makefile.in | 4 ++--
src/plugins/certauth/test/main.c | 11 +++++++++--
src/plugins/preauth/pkinit/pkinit_srv.c | 24 ++++++++++++++++--------
src/tests/t_certauth.py | 13 +++++++++++++
7 files changed, 52 insertions(+), 17 deletions(-)

# Thu Feb 27 15:23:32 2020 ghudson@mit.edu (Greg Hudson) - Requestor ghudson@mit.edu (Greg Hudson) added

# Thu Feb 27 15:23:32 2020 ghudson@mit.edu (Greg Hudson) - Status changed from 'new' to 'resolved'

# Mon Nov 23 16:03:23 2020 ghudson@mit.edu (Greg Hudson) - Version_Fixed 1.19 added

# Wed Jan 19 11:20:10 2022 ghudson@mit.edu (Greg Hudson) - Reference by #9046: requires_hwauth can cause a preauth loop with PKINIT added