Add HDB extension for storing policy regarding what historic keys may be used for

This commit is contained in:
Nicolas Williams
2011-07-16 17:51:39 -05:00
committed by Nicolas Williams
parent 308e53a4a8
commit c2ec368c36
6 changed files with 105 additions and 3 deletions

View File

@@ -64,6 +64,8 @@ static struct field_name {
{ "password", KADM5_TL_DATA, KRB5_TL_PASSWORD, KADM5_KEY_DATA, "Password", "Password", 0 },
{ "pkinit-acl", KADM5_TL_DATA, KRB5_TL_PKINIT_ACL, 0, "PK-INIT ACL", "PK-INIT ACL", 0 },
{ "aliases", KADM5_TL_DATA, KRB5_TL_ALIASES, 0, "Aliases", "Aliases", 0 },
{ "hist-kvno-diff-clnt", KADM5_TL_DATA, KRB5_TL_HIST_KVNO_DIFF_CLNT, 0, "Clnt hist keys", "Historic keys allowed for client", 0 },
{ "hist-kvno-diff-svc", KADM5_TL_DATA, KRB5_TL_HIST_KVNO_DIFF_SVC, 0, "Svc hist keys", "Historic keys allowed for service", 0 },
{ NULL }
};

View File

@@ -174,6 +174,18 @@ command = {
argument = "time"
help = "password expiration time"
}
option = {
long = "hist-kvno-diff-clnt"
type = "string"
argument = "kvno diff"
help = "historic keys allowed for client"
}
option = {
long = "hist-kvno-diff-svc"
type = "string"
argument = "kvno diff"
help = "historic keys allowed for service"
}
option = {
long = "use-defaults"
type = "flag"
@@ -365,6 +377,18 @@ command = {
argument = "policy"
help = "policy name"
}
option = {
long = "hist-kvno-diff-clnt"
type = "string"
argument = "kvno diff"
help = "historic keys allowed for client"
}
option = {
long = "hist-kvno-diff-svc"
type = "string"
argument = "kvno diff"
help = "historic keys allowed for service"
}
argument = "principal"
min_args = "1"
max_args = "1"