Lines Matching full:fast

2  * Support for FAST (Flexible Authentication Secure Tunneling).
4 * FAST is a mechanism to protect Kerberos against password guessing attacks
39 putil_debug(args, "not built with anonymous FAST support"); in cache_init_anonymous()
63 putil_debug_krb5(args, retval, "cannot find realm for anonymous FAST"); in cache_init_anonymous()
90 "cannot create anonymous FAST credential cache %s", in cache_init_anonymous()
98 putil_err_krb5(args, retval, "cannot create FAST credential options"); in cache_init_anonymous()
110 "cannot obtain anonymous credentials for FAST"); in cache_init_anonymous()
124 putil_err_krb5(args, retval, "cannot initialize FAST ticket cache"); in cache_init_anonymous()
129 putil_err_krb5(args, retval, "cannot store FAST credentials"); in cache_init_anonymous()
152 * Attempt to use an existing ticket cache for FAST. Checks whether
172 putil_debug_krb5(args, retval, "cannot open FAST ccache %s", cache); in fast_setup_cache()
178 "failed to get principal from FAST" in fast_setup_cache()
195 * Attempt to use an anonymous ticket cache for FAST. Checks whether
201 * If successful, store the anonymous FAST cache in the context where it will
216 putil_debug_krb5(args, retval, "skipping anonymous FAST"); in fast_setup_anon()
222 "cannot get name of anonymous FAST" in fast_setup_anon()
233 putil_debug(args, "anonymous authentication for FAST succeeded"); in fast_setup_anon()
242 * Set initial credential options for FAST if support is available.
246 * contains credentials. If that fails, skip setting the FAST cache.
250 * FAST armor.
252 * Note that this function cannot fail. If anything about FAST setup doesn't
253 * work, we continue without FAST.
279 /* We have a valid FAST ticket cache. Set the option. */ in pamk5_fast_setup()
282 putil_err_krb5(args, retval, "failed to set FAST ccache"); in pamk5_fast_setup()
284 putil_debug(args, "setting FAST credential cache to %s", cache); in pamk5_fast_setup()