]> git.ipfire.org Git - thirdparty/krb5.git/commit
Fix kadmin min_life check with nonexistent policy 464/head
authorGreg Hudson <ghudson@mit.edu>
Wed, 8 Jun 2016 04:00:55 +0000 (00:00 -0400)
committerGreg Hudson <ghudson@mit.edu>
Wed, 8 Jun 2016 22:01:32 +0000 (18:01 -0400)
commit5fca279ca4d18f1b5798847a98e7df8737d2eb7c
tree0de3fd958a0fba0550cc67ef72d2a8823e0ca2a4
parentb5a9fbe928ffc311a3abda562ef909cd7555b282
Fix kadmin min_life check with nonexistent policy

In kadmind, self-service key changes require a check against the
policy's min_life field.  If the policy does not exist, this check
should succeed according to the semantics introduced by ticket #7385.
Fix check_min_life() to return 0 if kadm5_get_policy() returns
KADM5_UNK_POLICY.  Reported by John Devitofranceschi.

ticket: 8427
target_version: 1.14-next
target_version: 1.13-next
tags: pullup
src/kadmin/server/misc.c
src/tests/t_policy.py