(init): create `default'
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@4228 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
@@ -99,13 +99,20 @@ init(int argc, char **argv)
|
|||||||
db->close(context, db);
|
db->close(context, db);
|
||||||
for(i = 1; i < argc; i++){
|
for(i = 1; i < argc; i++){
|
||||||
krb5_principal princ;
|
krb5_principal princ;
|
||||||
time_t max_life, max_rlife;
|
unsigned max_life, max_rlife;
|
||||||
|
|
||||||
/* Create `krbtgt/REALM' */
|
/* Create `krbtgt/REALM' */
|
||||||
krb5_make_principal(context, &princ, argv[i], "krbtgt", argv[i], NULL);
|
krb5_make_principal(context, &princ, argv[i], "krbtgt", argv[i], NULL);
|
||||||
max_life = get_deltat("Realm max ticket life",
|
get_deltat("Realm max ticket life",
|
||||||
"unlimited");
|
"unlimited",
|
||||||
max_rlife = get_deltat("Realm max renewable ticket life",
|
&max_life);
|
||||||
"unlimited");
|
if (max_life == 0)
|
||||||
|
max_life = 24 * 60 * 60;
|
||||||
|
get_deltat("Realm max renewable ticket life",
|
||||||
|
"unlimited",
|
||||||
|
&max_rlife);
|
||||||
|
if (max_rlife == 0)
|
||||||
|
max_rlife = 7 * max_life;
|
||||||
create_random_entry(princ, max_life, max_rlife, 0);
|
create_random_entry(princ, max_life, max_rlife, 0);
|
||||||
krb5_free_principal(context, princ);
|
krb5_free_principal(context, princ);
|
||||||
/* Create `kadmin/changepw' */
|
/* Create `kadmin/changepw' */
|
||||||
@@ -125,6 +132,28 @@ init(int argc, char **argv)
|
|||||||
"kadmin", "admin", NULL);
|
"kadmin", "admin", NULL);
|
||||||
create_random_entry(princ, 60*60, 60*60, KRB5_KDB_REQUIRES_PRE_AUTH);
|
create_random_entry(princ, 60*60, 60*60, KRB5_KDB_REQUIRES_PRE_AUTH);
|
||||||
krb5_free_principal(context, princ);
|
krb5_free_principal(context, princ);
|
||||||
|
/* Create `default' */
|
||||||
|
{
|
||||||
|
kadm5_principal_ent_rec ent;
|
||||||
|
int mask = 0;
|
||||||
|
|
||||||
|
memset (&ent, 0, sizeof(ent));
|
||||||
|
mask |= KADM5_PRINCIPAL;
|
||||||
|
krb5_make_principal(context, &ent.principal, argv[i],
|
||||||
|
"default", NULL);
|
||||||
|
mask |= KADM5_MAX_LIFE;
|
||||||
|
ent.max_life = 24 * 60 * 60;
|
||||||
|
mask |= KADM5_MAX_RLIFE;
|
||||||
|
ent.max_renewable_life = 7 * ent.max_life;
|
||||||
|
ent.attributes = KRB5_KDB_DISALLOW_ALL_TIX;
|
||||||
|
mask |= KADM5_ATTRIBUTES;
|
||||||
|
|
||||||
|
ret = kadm5_create_principal(kadm_handle, &ent, mask, "");
|
||||||
|
if (ret)
|
||||||
|
krb5_err (context, 1, ret, "kadm5_create_principal");
|
||||||
|
|
||||||
|
krb5_free_principal(context, ent.principal);
|
||||||
|
}
|
||||||
}
|
}
|
||||||
return 0;
|
return 0;
|
||||||
}
|
}
|
||||||
|
Reference in New Issue
Block a user