diff options
| author | Ken Raeburn <raeburn@mit.edu> | 2000-03-16 13:05:17 +0000 |
|---|---|---|
| committer | Ken Raeburn <raeburn@mit.edu> | 2000-03-16 13:05:17 +0000 |
| commit | d88c5a0fb51d749d64a8e7ddfd36b049c4f0ae5f (patch) | |
| tree | 0b19f76d9ad00cad8ed2266e49176a82b9cbe937 /src/lib/kadm5/srv/server_acl.h | |
| parent | 49bbd71f54fe95cd53f0cb7a7ef075ba04c7b802 (diff) | |
| download | krb5-d88c5a0fb51d749d64a8e7ddfd36b049c4f0ae5f.zip krb5-d88c5a0fb51d749d64a8e7ddfd36b049c4f0ae5f.tar.gz krb5-d88c5a0fb51d749d64a8e7ddfd36b049c4f0ae5f.tar.bz2 | |
Matt Crawford's kadm acl fixes & enhancements
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12121 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/lib/kadm5/srv/server_acl.h')
| -rw-r--r-- | src/lib/kadm5/srv/server_acl.h | 21 |
1 files changed, 19 insertions, 2 deletions
diff --git a/src/lib/kadm5/srv/server_acl.h b/src/lib/kadm5/srv/server_acl.h index e2aa8bd..226a4d9 100644 --- a/src/lib/kadm5/srv/server_acl.h +++ b/src/lib/kadm5/srv/server_acl.h @@ -70,6 +70,18 @@ ACL_LIST | \ ACL_SETKEY) +typedef struct _restriction { + long mask; + krb5_flags require_attrs; + krb5_flags forbid_attrs; + krb5_deltat princ_lifetime; + krb5_deltat pw_lifetime; + krb5_deltat max_life; + krb5_deltat max_renewable_life; + long aux_attributes; + char *policy; +} restriction_t; + krb5_error_code acl_init KRB5_PROTOTYPE((krb5_context, int, @@ -81,6 +93,11 @@ krb5_boolean acl_check KRB5_PROTOTYPE((krb5_context, gss_name_t, krb5_int32, - krb5_principal)); - + krb5_principal, + restriction_t **)); +krb5_error_code acl_impose_restrictions + KRB5_PROTOTYPE((krb5_context, + kadm5_principal_ent_rec *, + long *, + restriction_t *)); #endif /* SERVER_ACL_H__ */ |