diff options
author | Greg Hudson <ghudson@mit.edu> | 2010-12-01 20:01:46 +0000 |
---|---|---|
committer | Greg Hudson <ghudson@mit.edu> | 2010-12-01 20:01:46 +0000 |
commit | 9479352bf9c570659ebdc40561ac81a7eb292b08 (patch) | |
tree | 3a4fc5078619402e8aba1386d2a99f58a207efc2 /src/util | |
parent | cdd631f3ec5c02f9c2983f459f944577a5a0c3e2 (diff) | |
download | krb5-9479352bf9c570659ebdc40561ac81a7eb292b08.zip krb5-9479352bf9c570659ebdc40561ac81a7eb292b08.tar.gz krb5-9479352bf9c570659ebdc40561ac81a7eb292b08.tar.bz2 |
Implement restrict_anonymous_to_tgt realm flag
Implement a new realm flag to reject ticket requests from anonymous
principals to any principal other than the local TGT. Allows FAST to
be deployed using anonymous tickets as armor in realms where the set
of authenticatable users must be constrained.
ticket: 6829
target_version: 1.9
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24547 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/util')
-rw-r--r-- | src/util/k5test.py | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/src/util/k5test.py b/src/util/k5test.py index a710eee..a032d78 100644 --- a/src/util/k5test.py +++ b/src/util/k5test.py @@ -181,6 +181,7 @@ Scripts may use the following functions and variables: - ktutil - kinit - klist + - kvno - kdestroy - kpasswd - t_inetd @@ -1054,6 +1055,7 @@ kdb5_util = os.path.join(buildtop, 'kadmin', 'dbutil', 'kdb5_util') ktutil = os.path.join(buildtop, 'kadmin', 'ktutil', 'ktutil') kinit = os.path.join(buildtop, 'clients', 'kinit', 'kinit') klist = os.path.join(buildtop, 'clients', 'klist', 'klist') +kvno = os.path.join(buildtop, 'clients', 'kvno', 'kvno') kdestroy = os.path.join(buildtop, 'clients', 'kdestroy', 'kdestroy') kpasswd = os.path.join(buildtop, 'clients', 'kpasswd', 'kpasswd') t_inetd = os.path.join(buildtop, 'tests', 'dejagnu', 't_inetd') |