diff options
author | Nicolas Williams <nico@cryptonector.com> | 2012-07-18 16:27:35 -0500 |
---|---|---|
committer | Greg Hudson <ghudson@mit.edu> | 2012-07-30 19:11:28 -0400 |
commit | 5829ca2b348974e52a67b553afc7f7491007c33a (patch) | |
tree | 3fdbcdfc56a26445c2f2fce9fb72b6deddb28d0f /src/clients | |
parent | 796366a03ea170efb937913acae36a2083a5329e (diff) | |
download | krb5-5829ca2b348974e52a67b553afc7f7491007c33a.zip krb5-5829ca2b348974e52a67b553afc7f7491007c33a.tar.gz krb5-5829ca2b348974e52a67b553afc7f7491007c33a.tar.bz2 |
Policy extensions + new policy: allowed ks types
This simply adds KADM5_API_VERSION_4 and various fields to the
policy structures:
- attributes (policy-ish principal attributes)
- max_life (max ticket life)
- max_renewable_life (max ticket renewable life)
- allowed_keysalts (allowed key/salt types)
- TL data (future policy extensions)
Of these only allowed_keysalts is currently implemented.
Some refactoring of TL data handling is also done.
ticket: 7223 (new)
Diffstat (limited to 'src/clients')
-rw-r--r-- | src/clients/kinit/kinit_kdb.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/clients/kinit/kinit_kdb.c b/src/clients/kinit/kinit_kdb.c index cc3df04..8e949f9 100644 --- a/src/clients/kinit/kinit_kdb.c +++ b/src/clients/kinit/kinit_kdb.c @@ -62,7 +62,7 @@ kinit_kdb_init(krb5_context *pcontext, char *realm) config.realm = realm; retval = kadm5_init(*pcontext, "kinit", NULL /*pass*/, "kinit", &config, - KADM5_STRUCT_VERSION, KADM5_API_VERSION_3, NULL, + KADM5_STRUCT_VERSION, KADM5_API_VERSION_4, NULL, &server_handle); if (retval) return retval; |