]> git.ipfire.org Git - thirdparty/krb5.git/commit
Policy extensions + new policy: allowed ks types
authorNicolas Williams <nico@cryptonector.com>
Wed, 18 Jul 2012 21:27:35 +0000 (16:27 -0500)
committerGreg Hudson <ghudson@mit.edu>
Mon, 30 Jul 2012 23:11:28 +0000 (19:11 -0400)
commit5829ca2b348974e52a67b553afc7f7491007c33a
tree3fdbcdfc56a26445c2f2fce9fb72b6deddb28d0f
parent796366a03ea170efb937913acae36a2083a5329e
Policy extensions + new policy: allowed ks types

This simply adds KADM5_API_VERSION_4 and various fields to the
policy structures:

 - attributes         (policy-ish principal attributes)
 - max_life           (max ticket life)
 - max_renewable_life (max ticket renewable life)
 - allowed_keysalts   (allowed key/salt types)
 - TL data            (future policy extensions)

Of these only allowed_keysalts is currently implemented.

Some refactoring of TL data handling is also done.

ticket: 7223 (new)
35 files changed:
doc/rst_source/krb_admins/admin_commands/kadmin_local.rst
doc/rst_source/krb_admins/admin_commands/kdb5_util.rst
src/clients/kinit/kinit_kdb.c
src/include/kdb.h
src/kadmin/cli/kadmin.c
src/kadmin/dbutil/dump.c
src/kadmin/dbutil/kadm5_create.c
src/kadmin/dbutil/kdb5_util.c
src/kadmin/server/ovsec_kadmd.c
src/kadmin/testing/util/tcl_kadm5.c
src/lib/kadm5/admin.h
src/lib/kadm5/admin_internal.h
src/lib/kadm5/clnt/client_init.c
src/lib/kadm5/clnt/clnt_policy.c
src/lib/kadm5/kadm_err.et
src/lib/kadm5/kadm_rpc_xdr.c
src/lib/kadm5/misc_free.c
src/lib/kadm5/srv/server_init.c
src/lib/kadm5/srv/svr_policy.c
src/lib/kadm5/srv/svr_principal.c
src/lib/kadm5/unit-test/destroy-test.c
src/lib/kadm5/unit-test/handle-test.c
src/lib/kadm5/unit-test/init-test.c
src/lib/kadm5/unit-test/iter-test.c
src/lib/kadm5/unit-test/randkey-test.c
src/lib/kadm5/unit-test/setkey-test.c
src/lib/kdb/kdb5.c
src/lib/kdb/libkdb5.exports
src/plugins/kdb/db2/pol_xdr.c
src/plugins/kdb/db2/policy_db.h
src/slave/kpropd.c
src/tests/Makefile.in
src/tests/hist.c
src/tests/t_allowed_keysalts.py [new file with mode: 0644]
src/tests/t_general.py