kdc: Add global disable_pac config param

This commit is contained in:
Nicolas Williams
2023-06-04 22:55:54 -05:00
committed by Nico Williams
parent 66445f4341
commit 2a38fa17b5
4 changed files with 19 additions and 0 deletions

View File

@@ -101,6 +101,7 @@ krb5_kdc_get_config(krb5_context context, krb5_kdc_configuration **config)
c->strict_nametypes = FALSE;
c->trpolicy = TRPOLICY_ALWAYS_CHECK;
c->require_pac = FALSE;
c->disable_pac = FALSE;
c->enable_fast = TRUE;
c->enable_armored_pa_enc_timestamp = TRUE;
c->enable_unarmored_pa_enc_timestamp = TRUE;
@@ -263,6 +264,14 @@ krb5_kdc_get_config(krb5_context context, krb5_kdc_configuration **config)
"require_pac",
NULL);
c->disable_pac =
krb5_config_get_bool_default(context,
NULL,
c->disable_pac,
"kdc",
"disable_pac",
NULL);
c->enable_fast =
krb5_config_get_bool_default(context,
NULL,