(create_random_entry): create principal with random password even
though its disabled. From Andrew Bartlet <abartlet@samba.org> git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16040 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
@@ -49,6 +49,11 @@ create_random_entry(krb5_principal princ,
|
|||||||
krb5_keyblock *keys;
|
krb5_keyblock *keys;
|
||||||
int n_keys, i;
|
int n_keys, i;
|
||||||
char *name;
|
char *name;
|
||||||
|
const char *password;
|
||||||
|
char pwbuf[512];
|
||||||
|
|
||||||
|
random_password(pwbuf, sizeof(pwbuf));
|
||||||
|
password = pwbuf;
|
||||||
|
|
||||||
ret = krb5_unparse_name(context, princ, &name);
|
ret = krb5_unparse_name(context, princ, &name);
|
||||||
if (ret) {
|
if (ret) {
|
||||||
@@ -70,12 +75,15 @@ create_random_entry(krb5_principal princ,
|
|||||||
ent.attributes |= attributes | KRB5_KDB_DISALLOW_ALL_TIX;
|
ent.attributes |= attributes | KRB5_KDB_DISALLOW_ALL_TIX;
|
||||||
mask |= KADM5_ATTRIBUTES;
|
mask |= KADM5_ATTRIBUTES;
|
||||||
|
|
||||||
ret = kadm5_create_principal(kadm_handle, &ent, mask, "hemlig");
|
/* Create the entry with a random password */
|
||||||
|
ret = kadm5_create_principal(kadm_handle, &ent, mask, password);
|
||||||
if(ret) {
|
if(ret) {
|
||||||
krb5_warn(context, ret, "create_random_entry(%s): randkey failed",
|
krb5_warn(context, ret, "create_random_entry(%s): randkey failed",
|
||||||
name);
|
name);
|
||||||
goto out;
|
goto out;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
/* Replace the string2key based keys with real random bytes */
|
||||||
ret = kadm5_randkey_principal(kadm_handle, princ, &keys, &n_keys);
|
ret = kadm5_randkey_principal(kadm_handle, princ, &keys, &n_keys);
|
||||||
if(ret) {
|
if(ret) {
|
||||||
krb5_warn(context, ret, "create_random_entry*%s): randkey failed",
|
krb5_warn(context, ret, "create_random_entry*%s): randkey failed",
|
||||||
|
Reference in New Issue
Block a user