Add require-pwchange flag to HDB and honour it if present in mit-db:.

This commit is contained in:
Roland C. Dowdeswell
2012-02-27 10:19:54 +00:00
parent 91f2de8d1a
commit 0da84c0c3a
5 changed files with 11 additions and 0 deletions

View File

@@ -51,6 +51,7 @@ attr_to_flags(unsigned attr, HDBFlags *flags)
/* DUP_SKEY */
flags->invalid = !!(attr & KRB5_KDB_DISALLOW_ALL_TIX);
flags->require_preauth = !!(attr & KRB5_KDB_REQUIRES_PRE_AUTH);
flags->require_pwchange = !!(attr & KRB5_KDB_REQUIRES_PWCHANGE);
/* HW_AUTH */
flags->server = !(attr & KRB5_KDB_DISALLOW_SVR);
flags->change_pw = !!(attr & KRB5_KDB_PWCHANGE_SERVICE);