hdb: add no-auth-data-reqd flag to HDB entry

Add a new flag, no-auth-data-reqd, to the HDB entry which indicates that a PAC
should not be included on issued service tickets.

kadmin/kadmin.1

@@ -423,7 +423,8 @@ Possible attributes are:
 .Li disallow-renewable ,
 .Li disallow-tgt-based ,
 .Li disallow-forwardable ,
-.Li disallow-postdated
+.Li disallow-postdated ,
+.Li no-auth-data-reqd
 .Pp
 Attributes may be negated with a "-", e.g.,
 .Pp

kadmin/util.c

@@ -69,6 +69,7 @@ struct units kdb_attrs[] = {
     { "disallow-tgt-based",	KRB5_KDB_DISALLOW_TGT_BASED },
     { "disallow-forwardable",	KRB5_KDB_DISALLOW_FORWARDABLE },
     { "disallow-postdated",	KRB5_KDB_DISALLOW_POSTDATED },
+    { "no-auth-data-reqd",	KRB5_KDB_NO_AUTH_DATA_REQUIRED },
     { NULL, 0 }
 };