From 418fdb7f7992ff8da80e23066e606362dba90e6f Mon Sep 17 00:00:00 2001 From: Fredrik Pettai Date: Thu, 28 Nov 2013 14:14:11 +0100 Subject: [PATCH] Also validate kdigest hacks Add validation of the kdigest configuration parameters --- lib/krb5/verify_krb5_conf.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/lib/krb5/verify_krb5_conf.c b/lib/krb5/verify_krb5_conf.c index 00952d782..eb3d718ca 100644 --- a/lib/krb5/verify_krb5_conf.c +++ b/lib/krb5/verify_krb5_conf.c @@ -533,6 +533,8 @@ struct entry kdc_entries[] = { { "pkinit_allow_proxy_certificate", krb5_config_string, NULL, 0 }, { "hdb-ldap-create-base", krb5_config_string, NULL, 0 }, { "v4-realm", krb5_config_string, NULL, 0 }, + { "enable-digest", krb5_config_string, check_boolean, 0 }, + { "digests_allowed", krb5_config_string, NULL, 0 }, { NULL, 0, NULL, 0 } }; @@ -541,6 +543,7 @@ struct entry kadmin_entries[] = { { "default_keys", krb5_config_string, NULL, 0 }, { "use_v4_salt", krb5_config_string, NULL, 0 }, { "require-preauth", krb5_config_string, check_boolean, 0 }, + { "save-password", krb5_config_string, check_boolean, 0 }, { NULL, 0, NULL, 0 } }; struct entry log_strings[] = {