]> git.ipfire.org Git - thirdparty/krb5.git/commit
Add new DAL function for renaming principals
authorSarah Day <sarahday@mit.edu>
Thu, 31 Mar 2016 21:49:55 +0000 (17:49 -0400)
committerGreg Hudson <ghudson@mit.edu>
Mon, 23 May 2016 15:14:00 +0000 (11:14 -0400)
commitc38838be956ce72fcd7142f14bc374dc13dd8bb2
tree4a5bbbfd895d0cba42c235902d85d156d6c6f78e
parent09cdb3079508f9d3fcc107a8ee8e7537f70c9d37
Add new DAL function for renaming principals

Previously libkadm5srv renamed principals by getting the principal
entry, renaming the entry, putting it in the DB, then deleting the old
one.  This does not work in certain KDB modules such as LDAP.  A new
DAL function is necessary to support all KDB modules.  Add a new DAL
function to support custom renames in all KDB modules, with a default
implementation that performs the previous functionality of adding and
deleting the principal entry.

NOTE: if the default rename function isn't used and iprop logging is
enabled, iprop would fail since it doesn't formally support renaming.
In that case, the call to krb5_db_rename_principal() will fail with
the code KRB5_PLUGIN_OP_NOTSUPP.

ticket: 8065
src/include/kdb.h
src/lib/kadm5/srv/svr_principal.c
src/lib/kdb/kdb5.c
src/lib/kdb/kdb_default.c
src/lib/kdb/libkdb5.exports
src/plugins/kdb/db2/db2_exp.c
src/plugins/kdb/ldap/ldap_exp.c
src/plugins/kdb/test/kdb_test.c
src/tests/t_iprop.py