From b0d08b7f04374873f95aa62afc30920aa9aacf10 Mon Sep 17 00:00:00 2001 From: Johan Danielsson Date: Wed, 7 Jun 2000 09:51:19 +0000 Subject: [PATCH] add options to enable/disable v4 and 524 requests git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@8340 ec53bebd-3082-4978-b11e-865c3cabbd6b --- kdc/config.c | 17 +++++++++++++++++ kdc/kdc_locl.h | 2 ++ 2 files changed, 19 insertions(+) diff --git a/kdc/config.c b/kdc/config.c index ff3160343..fc0aba0a8 100644 --- a/kdc/config.c +++ b/kdc/config.c @@ -65,6 +65,8 @@ krb5_addresses explicit_addresses; #ifdef KRB4 char *v4_realm; +int enable_v4 = -1; +int enable_524 = -1; #endif #ifdef KASERVER krb5_boolean enable_kaserver = -1; @@ -94,6 +96,12 @@ static struct getargs args[] = { #endif { "enable-http", 'H', arg_flag, &enable_http, "turn on HTTP support" }, #ifdef KRB4 + { "kerberos4", 0, arg_negative_flag, &enable_v4, + "don't respond to kerberos 4 requests" + }, + { "524", 0, arg_negative_flag, &enable_524, + "don't respond to 524 requests" + }, { "v4-realm", 'r', arg_string, &v4_realm, "realm to serve v4-requests for" @@ -289,6 +297,15 @@ configure(int argc, char **argv) } } +#ifdef KRB4 + if(enable_v4 == -1) + enable_v4 = krb5_config_get_bool_default(context, cf, TRUE, "kdc", + "enable-kerberos4", NULL); + if(enable_524 == -1) + enable_524 = krb5_config_get_bool_default(context, cf, enable_v4, + "kdc", "enable-524", NULL); +#endif + if(enable_http == -1) enable_http = krb5_config_get_bool(context, cf, "kdc", "enable-http", NULL); diff --git a/kdc/kdc_locl.h b/kdc/kdc_locl.h index 10b2a2313..e0520c84e 100644 --- a/kdc/kdc_locl.h +++ b/kdc/kdc_locl.h @@ -65,6 +65,8 @@ extern krb5_boolean allow_anonymous; #ifdef KRB4 extern char *v4_realm; +extern int enable_v4; +extern int enable_524; #endif #ifdef KASERVER extern krb5_boolean enable_kaserver;