From: Theodore Tso <tytso@mit.edu>
Date: Thu, 3 Jun 1993 00:24:28 +0000 (+0000)
Subject: Chnages to support the new KRB5_CRED message
X-Git-Tag: krb5-1.0-beta3~272
X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=f9cbaaf6ac664d8f8b69c3ee5abc083f0ee09fab;p=krb5.git

Chnages to support the new KRB5_CRED message

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@2566 dc483132-0cff-0310-8789-dd5450dbe970
---

diff --git a/src/lib/krb5/asn.1/KRB5-asn.py b/src/lib/krb5/asn.1/KRB5-asn.py
index 93692687f..26b40c764 100644
--- a/src/lib/krb5/asn.1/KRB5-asn.py
+++ b/src/lib/krb5/asn.1/KRB5-asn.py
@@ -237,13 +237,13 @@ KRB-SAFE-BODY ::= SEQUENCE {
 	usec[2]				INTEGER OPTIONAL,
 	seq-number[3]			INTEGER OPTIONAL,
 	s-address[4]			HostAddress,	-- sender's addr
-	r-address[5]			HostAddress OPTIONAL -- recip's addr
+	r-address[5]			HostAddress OPTIONAL -- recip's addr 
 }
 
 KRB-PRIV ::=	[APPLICATION 21] SEQUENCE {
 	pvno[0]		INTEGER,
 	msg-type[1]	INTEGER,
-	enc-part[3]	EncryptedData	-- EncKrbPrivPart
+	enc-part[3]	EncryptedData	-- EncKrbPrivPart 
 }
 
 EncKrbPrivPart ::=	[APPLICATION 28] SEQUENCE {
@@ -252,7 +252,36 @@ EncKrbPrivPart ::=	[APPLICATION 28] SEQUENCE {
 	usec[2]		INTEGER OPTIONAL,
 	seq-number[3]	INTEGER OPTIONAL,
 	s-address[4]	HostAddress,	-- sender's addr
-	r-address[5]	HostAddress OPTIONAL	-- recip's addr
+	r-address[5]	HostAddress OPTIONAL	-- recip's addr 
+}
+
+-- These two definitions are added to allow easy forwarding of 
+-- credentials.
+
+KRB-CRED ::= [APPLICATION 22] SEQUENCE {
+	pvno[0]		INTEGER,
+	msg-type[1]	INTEGER, -- KRB_CRED
+	tickets[2]	SEQUENCE OF Ticket,
+	enc-part[3]	EncryptedData -- EncKrbCredPart 
+}
+
+EncKrbCredPart ::= [APPLICATION 29] SEQUENCE OF SEQUENCE {
+	key[0]		EncryptionKey,
+	nonce[1]	INTEGER OPTIONAL,
+	timestamp[2]	KerberosTime,
+	usec[3]		INTEGER,
+	s-address[4]	HostAddress OPTIONAL,
+	r-address[5]	HostAddress OPTIONAL,
+        prealm[6] 	Realm OPTIONAL,
+        pname[7] 	PrincipalName OPTIONAL,
+        flags[8] 	TicketFlags OPTIONAL,
+        authtime[9] 	KerberosTime OPTIONAL,
+        starttime[10] 	KerberosTime OPTIONAL,
+        endtime[11] 	KerberosTime OPTIONAL,
+        renew-till[12] 	KerberosTime OPTIONAL,
+        srealm[13] 	Realm OPTIONAL,
+        sname[14] 	PrincipalName OPTIONAL,
+        caddr[15] 	HostAddresses OPTIONAL 
 }
 
 KRB-ERROR ::=	[APPLICATION 30] SEQUENCE {