]> git.ipfire.org Git - thirdparty/krb5.git/commitdiff
Add krbPwdPolicy attributes to kerberos.ldif
authorTomas Kuthan <tkuthan@gmail.com>
Fri, 2 Dec 2016 14:22:54 +0000 (15:22 +0100)
committerTom Yu <tlyu@mit.edu>
Mon, 9 Jan 2017 22:14:43 +0000 (17:14 -0500)
When LDAP backend support for policy extensions was added by
5edafa0532 (ticket 7223), the kerberos.ldif change neglected to add
the new attributes to krbPwdPolicy.

(cherry picked from commit 823e3088d835661fd718a941f602bb2972db96c8)

ticket: 8523
version_fixed: 1.14.5

src/plugins/kdb/ldap/libkdb_ldap/kerberos.ldif

index eaf979c9a87e4dee581a9c7da76e61d0203f0a15..c3f3e47aca30756e072a41192fe252c0465f95b7 100644 (file)
@@ -863,7 +863,7 @@ objectClasses: ( 2.16.840.1.113719.1.301.6.14.1
                 NAME 'krbPwdPolicy' 
                 SUP top
                 MUST ( cn )
-                MAY ( krbMaxPwdLife $ krbMinPwdLife $ krbPwdMinDiffChars $ krbPwdMinLength $ krbPwdHistoryLength $ krbPwdMaxFailure $ krbPwdFailureCountInterval $ krbPwdLockoutDuration ) )
+                MAY ( krbMaxPwdLife $ krbMinPwdLife $ krbPwdMinDiffChars $ krbPwdMinLength $ krbPwdHistoryLength $ krbPwdMaxFailure $ krbPwdFailureCountInterval $ krbPwdLockoutDuration $ krbPwdAttributes $ krbPwdMaxLife $ krbPwdMaxRenewableLife $ krbPwdAllowedKeysalts ) )
 
 
 ##### The krbTicketPolicyAux holds Kerberos ticket policy attributes.