]> git.ipfire.org Git - thirdparty/krb5.git/commitdiff
Add krbPwdPolicy attributes to kerberos.ldif
authorTomas Kuthan <tkuthan@gmail.com>
Fri, 2 Dec 2016 14:22:54 +0000 (15:22 +0100)
committerTom Yu <tlyu@mit.edu>
Mon, 9 Jan 2017 19:28:54 +0000 (14:28 -0500)
When LDAP backend support for policy extensions was added by
5edafa0532 (ticket 7223), the kerberos.ldif change neglected to add
the new attributes to krbPwdPolicy.

(cherry picked from commit 823e3088d835661fd718a941f602bb2972db96c8)

ticket: 8523
version_fixed: 1.15.1

src/plugins/kdb/ldap/libkdb_ldap/kerberos.ldif

index c27e3d9b3114cd79193793754c73c511b670084b..13db486090bd62013acb900369f366ec32ae2277 100644 (file)
@@ -878,7 +878,7 @@ objectClasses: ( 2.16.840.1.113719.1.301.6.14.1
                 NAME 'krbPwdPolicy' 
                 SUP top
                 MUST ( cn )
-                MAY ( krbMaxPwdLife $ krbMinPwdLife $ krbPwdMinDiffChars $ krbPwdMinLength $ krbPwdHistoryLength $ krbPwdMaxFailure $ krbPwdFailureCountInterval $ krbPwdLockoutDuration ) )
+                MAY ( krbMaxPwdLife $ krbMinPwdLife $ krbPwdMinDiffChars $ krbPwdMinLength $ krbPwdHistoryLength $ krbPwdMaxFailure $ krbPwdFailureCountInterval $ krbPwdLockoutDuration $ krbPwdAttributes $ krbPwdMaxLife $ krbPwdMaxRenewableLife $ krbPwdAllowedKeysalts ) )
 
 
 ##### The krbTicketPolicyAux holds Kerberos ticket policy attributes.