From d46f9a6cbd1cb0c8e8cba026f8766299502338d5 Mon Sep 17 00:00:00 2001 From: Assar Westerlund Date: Sun, 2 Apr 2000 21:26:44 +0000 Subject: [PATCH] (init): create changepw/kerberos with disallow-tgt and pwchange attributes git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@8088 ec53bebd-3082-4978-b11e-865c3cabbd6b --- kadmin/init.c | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/kadmin/init.c b/kadmin/init.c index d0cbb0db5..4ccb1d9a4 100644 --- a/kadmin/init.c +++ b/kadmin/init.c @@ -1,5 +1,5 @@ /* - * Copyright (c) 1997, 1998, 1999 Kungliga Tekniska Högskolan + * Copyright (c) 1997 - 2000 Kungliga Tekniska Högskolan * (Royal Institute of Technology, Stockholm, Sweden). * All rights reserved. * @@ -180,7 +180,10 @@ init(int argc, char **argv) /* Create `changepw/kerberos' (for v4 compat) */ krb5_make_principal(context, &princ, realm, "changepw", "kerberos", NULL); - create_random_entry(princ, 60*60, 60*60, 0); + create_random_entry(princ, 60*60, 60*60, + KRB5_KDB_DISALLOW_TGT_BASED| + KRB5_KDB_PWCHANGE_SERVICE); + krb5_free_principal(context, princ); /* Create `default' */