isflagset
if (isflagset(state->request->kdc_options, KDC_OPT_CANONICALIZE) ||
if (isflagset(state->request->kdc_options, KDC_OPT_CANONICALIZE) &&
if (isflagset(state->request->kdc_options, KDC_OPT_CANONICALIZE)) {
if (isflagset(state->request->kdc_options, KDC_OPT_POSTDATED))
if (isflagset(state->request->kdc_options, KDC_OPT_REQUEST_ANONYMOUS)) {
if (!isflagset(enc_tkt_reply->flags, TKT_FLG_ANONYMOUS)) {
if (isflagset(c_flags, KRB5_KDB_FLAG_PROTOCOL_TRANSITION))
else if (isflagset(c_flags, KRB5_KDB_FLAG_CONSTRAINED_DELEGATION))
isflagset (client->attributes, KRB5_KDB_REQUIRES_PRE_AUTH) ? "" : "no ",
isflagset (client->attributes, KRB5_KDB_REQUIRES_HW_AUTH) ? "" : "no ",
isflagset (enc_tkt_reply->flags, TKT_FLG_PRE_AUTH) ? "" : "no ",
isflagset (enc_tkt_reply->flags, TKT_FLG_HW_AUTH) ? "" : "no ");
if (isflagset(client->attributes, KRB5_KDB_REQUIRES_PRE_AUTH) &&
!isflagset(enc_tkt_reply->flags, TKT_FLG_PRE_AUTH))
if (isflagset(client->attributes, KRB5_KDB_REQUIRES_HW_AUTH) &&
!isflagset(enc_tkt_reply->flags, TKT_FLG_HW_AUTH))
state->hw_only = isflagset(rock->client->attributes,
if (isflagset(request->kdc_options, KDC_OPT_RENEWABLE))
else if (isflagset(request->kdc_options, KDC_OPT_RENEWABLE_OK) &&
if (!isflagset(request->kdc_options, KDC_OPT_RENEWABLE) &&
if (isflagset(apreq->ap_options, AP_OPTS_USE_SESSION_KEY) ||
isflagset(apreq->ap_options, AP_OPTS_MUTUAL_REQUIRED)) {
!isflagset(server->attributes, KRB5_KDB_PWCHANGE_SERVICE)) {
if (isflagset(client->attributes, KRB5_KDB_REQUIRES_PWCHANGE) &&
!isflagset(server->attributes, KRB5_KDB_PWCHANGE_SERVICE)) {
if ((isflagset(request->kdc_options, KDC_OPT_ALLOW_POSTDATE) ||
isflagset(request->kdc_options, KDC_OPT_POSTDATED)) &&
(isflagset(client->attributes, KRB5_KDB_DISALLOW_POSTDATED) ||
isflagset(server->attributes, KRB5_KDB_DISALLOW_POSTDATED))) {
if (isflagset(client->attributes, KRB5_KDB_DISALLOW_ALL_TIX)) {
if (isflagset(server->attributes, KRB5_KDB_DISALLOW_ALL_TIX)) {
if (isflagset(server->attributes, KRB5_KDB_DISALLOW_SVR)) {
if (isflagset(tkt->enc_part2->flags, TKT_FLG_INVALID) &&
!isflagset(req->kdc_options, KDC_OPT_VALIDATE)) {