From 086477a9b5f34307755ff1e4b214a2cf1c628cf6 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Love=20H=C3=B6rnquist=20=C3=85strand?= Date: Sun, 24 Jul 2011 21:31:48 -0700 Subject: [PATCH] disable operation ofn fast cookie principal --- kadmin/init.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/kadmin/init.c b/kadmin/init.c index 7b615448e..ede740d4a 100644 --- a/kadmin/init.c +++ b/kadmin/init.c @@ -237,7 +237,8 @@ init(struct init_options *opt, int argc, char **argv) KRB5_WELLKNOWN_NAME, "org.h5l.fast-cookie", NULL); create_random_entry(princ, 60*60, 60*60, KRB5_KDB_REQUIRES_PRE_AUTH| - KRB5_KDB_DISALLOW_TGT_BASED); + KRB5_KDB_DISALLOW_TGT_BASED| + KRB5_KDB_DISALLOW_ALL_TIX); krb5_free_principal(context, princ); /* Create `default' */