]> git.ipfire.org Git - thirdparty/krb5.git/commit
Set TL_DATA mask flag for master key operations
authorSimo Sorce <simo@redhat.com>
Wed, 9 Dec 2015 23:09:18 +0000 (18:09 -0500)
committerTom Yu <tlyu@mit.edu>
Fri, 18 Dec 2015 18:32:26 +0000 (13:32 -0500)
commitd19f02e21f98b5f94c04263dfdde0f0c06ce4683
tree31a91f048705b3673df04fe1913346327d206f3c
parent54aee085cb8e75a058aff6b21dd3ccc8ee04919b
Set TL_DATA mask flag for master key operations

When kdb5_util adds or removes master keys, it modifies tl-data but
doesn't set the KADM5_TL_DATA mask flag, causing KDB modules that rely
on this signaling (such as the LDAP module) not to store the tl-data
changes.  Fix this issue by setting the mask bit in add_new_mkey() and
kdb5_purge_mkeys().

[ghudson@mit.edu: edit commit message]

(cherry picked from commit c877f13c8985d820583b0d7ac1bb4c5dc36e677e)

ticket: 8327
version_fixed: 1.13.4
tags: -pullup
status: resolved
src/kadmin/dbutil/kdb5_mkey.c