]> git.ipfire.org Git - thirdparty/krb5.git/commit
Implement password history in LDAP KDB module
authorSarah Day <sarahday@mit.edu>
Tue, 26 Jan 2016 17:22:41 +0000 (12:22 -0500)
committerGreg Hudson <ghudson@mit.edu>
Wed, 3 Feb 2016 18:02:48 +0000 (13:02 -0500)
commitb46cce2ea8c0841f7f93db73eefcd180c87a3eae
tree264652b1e7afa4aa10800395e88e246d00bc0d5c
parentd7f91ac2f6655e77bb3658c2c8cc6132f958a340
Implement password history in LDAP KDB module

The password history is stored in the kerberos LDAP schema attribute
'krbPwdHistory', with one history entry per attribute.  When the
history is decoded, the history entries are sorted by kvno with the
next replacement key set to the end of the list.  Based on a patch
from Tomas Kuthan.

ticket: 5889
src/lib/kadm5/admin.h
src/lib/kadm5/srv/svr_principal.c
src/plugins/kdb/ldap/libkdb_ldap/ldap_misc.c
src/plugins/kdb/ldap/libkdb_ldap/ldap_principal.c
src/plugins/kdb/ldap/libkdb_ldap/ldap_principal.h
src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c
src/plugins/kdb/ldap/libkdb_ldap/princ_xdr.c
src/plugins/kdb/ldap/libkdb_ldap/princ_xdr.h
src/tests/kdbtest.c
src/tests/t_kdb.py