From 5843ad321944a028f6dee7e1fd4f9381c4953d07 Mon Sep 17 00:00:00 2001
From: Sumit Bose <sbose@redhat.com>
Date: Thu, 18 Nov 2010 12:48:05 +0100
Subject: Add support for FAST in krb5 provider

---
 src/util/sss_krb5.c | 48 ++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 48 insertions(+)

(limited to 'src/util/sss_krb5.c')

diff --git a/src/util/sss_krb5.c b/src/util/sss_krb5.c
index 7fad32e8..174b6d9f 100644
--- a/src/util/sss_krb5.c
+++ b/src/util/sss_krb5.c
@@ -361,3 +361,51 @@ krb5_error_code KRB5_CALLCONV sss_krb5_get_init_creds_opt_set_expire_callback(
     return 0;
 #endif
 }
+
+errno_t check_fast(const char *str, bool *use_fast)
+{
+#if HAVE_KRB5_GET_INIT_CREDS_OPT_SET_FAST_FLAGS
+    if (strcasecmp(str, "never") == 0 ) {
+        *use_fast = false;
+    } else if (strcasecmp(str, "try") == 0 || strcasecmp(str, "demand") == 0) {
+        *use_fast = true;
+    } else {
+        sss_log(SSS_LOG_ALERT, "Unsupported value [%s] for option krb5_use_fast,"
+                               "please use never, try, or demand.\n");
+        return EINVAL;
+    }
+
+    return EOK;
+#else
+    sss_log(SSS_LOG_ALERT, "This build of sssd done not support FAST. "
+                           "Please remove option krb5_use_fast.\n");
+    return EINVAL;
+#endif
+}
+
+krb5_error_code KRB5_CALLCONV sss_krb5_get_init_creds_opt_set_fast_ccache_name(
+                                                   krb5_context context,
+                                                   krb5_get_init_creds_opt *opt,
+                                                   const char *fast_ccache_name)
+{
+#ifdef HAVE_KRB5_GET_INIT_CREDS_OPT_SET_FAST_CCACHE_NAME
+    return krb5_get_init_creds_opt_set_fast_ccache_name(context, opt,
+                                                        fast_ccache_name);
+#else
+    DEBUG(5, ("krb5_get_init_creds_opt_set_fast_ccache_name not available.\n"));
+    return 0;
+#endif
+}
+
+krb5_error_code KRB5_CALLCONV sss_krb5_get_init_creds_opt_set_fast_flags(
+                                                   krb5_context context,
+                                                   krb5_get_init_creds_opt *opt,
+                                                   krb5_flags flags)
+{
+#ifdef HAVE_KRB5_GET_INIT_CREDS_OPT_SET_FAST_FLAGS
+    return krb5_get_init_creds_opt_set_fast_flags(context, opt, flags);
+#else
+    DEBUG(5, ("krb5_get_init_creds_opt_set_fast_flags not available.\n"));
+    return 0;
+#endif
+}
-- 
cgit