Age | Commit message (Collapse) | Author | Files | Lines |
|
page:
* Modules receive the policy name but not the policy object.
* Enforcement of password policy is out of the interface's scope.
* Built-in modules are: empty, dict, hesiod, princ.
* The consumer API loader takes care of open/close, so there is only
a wrapper function for check.
The project page is at:
http://k5wiki.kerberos.org/wiki/Projects/Password_quality_pluggable_interface
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/plugins2@24266 dc483132-0cff-0310-8789-dd5450dbe970
|
|
module vtable initializer functions.
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/plugins2@24213 dc483132-0cff-0310-8789-dd5450dbe970
|
|
git-svn-id: svn://anonsvn.mit.edu/krb5/branches/plugins2@24203 dc483132-0cff-0310-8789-dd5450dbe970
|
|
free_principal, delete_principal, and get_policy. Make get_principal
allocate the DB entry container. Fold krb5_db_get_principal_ext into
krb5_db_get_principal.
ticket: 6749
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24175 dc483132-0cff-0310-8789-dd5450dbe970
|
|
Add minimal support for re-randomizing the history key:
* cpw -randkey kadmin/history now works, but creates only one key.
* cpw -randkey -keepold kadmin/history still fails.
* libkadm5 no longer caches the history key. Performance impact
is minimal since password changes are not common.
* randkey no longer checks the newly randomized key against old keys,
and the disabled code to do so in setkey/setv4key is gone, so now
only kadm5_chpass_principal_3 accesses the password history.
ticket: 6660
target_version: 1.8
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23716 dc483132-0cff-0310-8789-dd5450dbe970
|
|
make reindent
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23100 dc483132-0cff-0310-8789-dd5450dbe970
|
|
Merge Luke's users/lhoward/lockout2 branch to trunk. Implements
account lockout policies for preauth-using principals using existing
principal metadata fields and new policy fields. The kadmin API
version is bumped from 2 to 3 to compatibly extend the policy_ent_rec
structure.
ticket: 6577
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23038 dc483132-0cff-0310-8789-dd5450dbe970
|
|
currently depending on command-line macro settings.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17825 dc483132-0cff-0310-8789-dd5450dbe970
|
|
include directives sometimes using krb5/foo.h and sometimes using foo.h, and
-I options always given for both directories in both source and build trees,
push include/krb5/* up a level and drop the krb5 directory (except, for the
moment, the change log).
Updated #include directives, -I options, and dependencies accordingly, and
deleted one or two bits of old, unused code that was noticed in the process.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17730 dc483132-0cff-0310-8789-dd5450dbe970
|
|
it suffices to remove the inclusion of k5-int.h, sometimes including errno.h or
another header. In a couple cases, include order has been changed, or k5-int.h
has been included instead of krb5.h.
ticket: 3236
status: resolved
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17494 dc483132-0cff-0310-8789-dd5450dbe970
|
|
Will probably break things.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17258 dc483132-0cff-0310-8789-dd5450dbe970
|
|
krb5_copy_key_data_contents.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13587 dc483132-0cff-0310-8789-dd5450dbe970
|
|
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13419 dc483132-0cff-0310-8789-dd5450dbe970
|
|
krb5_free_key_data_contents() which really should be in libkdb.
* kadm_rpc_xdr.c: Include krb5/admin_xdr.h for prototypes.
* kadm_rpc.h: Add prototypes for client and server stub
functions. Server functions renamed to have _svc appended.
* alt_prof.c: Clean up warnings. Do not shadow index() with local
variable.
* admin_xdr.h: Add prototypes for xdr_nulltype(), xdr_krb5_ui_4(),
xdr_krb5_int16(), xdr_krb5_key_data_nocontents(),
xdr_krb5_key_salt_tuple(), xdr_krb5_tl_data(),
xdr_kadm5_principal_ent_rec_v1(), xdr_cprinc3_arg(),
xdr_generic_ret(0, xdr_chpass3_arg(), xdr_setv4key_arg(),
xdr_setkey_arg(), xdr_setkey3_arg(), xdr_chrand3_arg(),
xdr_gprincs_arg(), xdr_grpincs_ret(), xdr_gpols_arg(),
xdr_gpols_ret(), xdr_getprivs_ret(), xdr_krb5_salttype().
* admin_internal.h: Add prototype for _kadm5_check_handle().
* admin.h: Add prototypes for kadm5_free_config_params(),
kadm5_decrypt_key(), ovsec_kadm_free_name_list().
* adb.h: Add prototypes for xdr_osa_pw_hist_ent(),
xdr_krb5_key_data(), osa_adb_rename_db(),
osa_adb_rename_policy_db().
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13013 dc483132-0cff-0310-8789-dd5450dbe970
|
|
(from Nathan Neulinger <nneul@umr.edu>)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12332 dc483132-0cff-0310-8789-dd5450dbe970
|
|
KADM5_KEY_DATA to ALL_PRINC_MASK [krb5-admin/20]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9220 dc483132-0cff-0310-8789-dd5450dbe970
|
|
instead of malloc.h [krb5-admin/35]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9206 dc483132-0cff-0310-8789-dd5450dbe970
|
|
ALL_PRINC_MASK.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9090 dc483132-0cff-0310-8789-dd5450dbe970
|
|
OV_MERGE branches. This includes, but is not limited to, the new openvision
admin system, and major changes to gssapi to add functionality, and bring
the implementation in line with rfc1964. before committing, the
code was built and tested for netbsd and solaris.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8774 dc483132-0cff-0310-8789-dd5450dbe970
|