diff options
| author | Greg Hudson <ghudson@mit.edu> | 2009-05-07 19:51:46 +0000 |
|---|---|---|
| committer | Greg Hudson <ghudson@mit.edu> | 2009-05-07 19:51:46 +0000 |
| commit | d1b0cf22c197d15ad16b7bad15776845053e605a (patch) | |
| tree | b9ba33a99d72dd78910ca9206d068316272b8a2c /src/lib/kadm5/srv | |
| parent | 8eb13e1a4ed504c1db92b363fb19d0b4efad64e6 (diff) | |
| download | krb5-d1b0cf22c197d15ad16b7bad15776845053e605a.zip krb5-d1b0cf22c197d15ad16b7bad15776845053e605a.tar.gz krb5-d1b0cf22c197d15ad16b7bad15776845053e605a.tar.bz2 | |
Allow more than 10 past keys to be stored by a policy
Remove the arbitrary limit of 10 past keys in policies. We were not
taking advantage of that limit in any other code.
ticket: 6482
target_version: 1.7
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22323 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/lib/kadm5/srv')
| -rw-r--r-- | src/lib/kadm5/srv/svr_policy.c | 7 |
1 files changed, 2 insertions, 5 deletions
diff --git a/src/lib/kadm5/srv/svr_policy.c b/src/lib/kadm5/srv/svr_policy.c index 650cadf..7add671 100644 --- a/src/lib/kadm5/srv/svr_policy.c +++ b/src/lib/kadm5/srv/svr_policy.c @@ -15,7 +15,6 @@ static char *rcsid = "$Header$"; #include <string.h> #include <errno.h> -#define MAX_PW_HISTORY 10 #define MIN_PW_HISTORY 1 #define MIN_PW_CLASSES 1 #define MAX_PW_CLASSES 5 @@ -132,8 +131,7 @@ kadm5_create_policy_internal(void *server_handle, if (!(mask & KADM5_PW_HISTORY_NUM)) pent.pw_history_num = MIN_PW_HISTORY; else { - if(entry->pw_history_num < MIN_PW_HISTORY || - entry->pw_history_num > MAX_PW_HISTORY) + if(entry->pw_history_num < MIN_PW_HISTORY) return KADM5_BAD_HISTORY; else pent.pw_history_num = entry->pw_history_num; @@ -242,8 +240,7 @@ kadm5_modify_policy_internal(void *server_handle, p->pw_min_classes = entry->pw_min_classes; } if ((mask & KADM5_PW_HISTORY_NUM)) { - if(entry->pw_history_num < MIN_PW_HISTORY || - entry->pw_history_num > MAX_PW_HISTORY) { + if(entry->pw_history_num < MIN_PW_HISTORY) { krb5_db_free_policy(handle->context, p); return KADM5_BAD_HISTORY; } |