diff options
| author | Pavel Zuna <pzuna@redhat.com> | 2011-02-07 10:10:12 -0500 |
|---|---|---|
| committer | Rob Crittenden <rcritten@redhat.com> | 2011-02-10 11:16:57 -0500 |
| commit | ab7e70248763ae176f8ea419df6d8b1c4c2eb1d6 (patch) | |
| tree | ba0cd4b8e5b4dadd1c294961b20dc1c53ad4eb39 | |
| parent | a247c3f30a8296d387bf471691541bcee7ea7403 (diff) | |
| download | freeipa-ab7e70248763ae176f8ea419df6d8b1c4c2eb1d6.tar.gz freeipa-ab7e70248763ae176f8ea419df6d8b1c4c2eb1d6.tar.xz freeipa-ab7e70248763ae176f8ea419df6d8b1c4c2eb1d6.zip | |
Set minimum for Kerberos policy max life and max renew.
Fix #847
| -rw-r--r-- | API.txt | 4 | ||||
| -rw-r--r-- | ipalib/plugins/krbtpolicy.py | 2 |
2 files changed, 4 insertions, 2 deletions
@@ -1427,8 +1427,8 @@ output: Output('metadata', <type 'dict'>, Gettext('Dict of JSON encoded IPA Obje command: krbtpolicy_mod args: 1,8,3 arg: Str('uid', attribute=True, cli_name='user', label=Gettext('User name', domain='ipa', localedir=None), multivalue=False, primary_key=True, query=True, required=False) -option: Int('krbmaxticketlife', attribute=True, autofill=False, cli_name='maxlife', label=Gettext('Max life', domain='ipa', localedir=None), multivalue=False, required=False) -option: Int('krbmaxrenewableage', attribute=True, autofill=False, cli_name='maxrenew', label=Gettext('Max renew', domain='ipa', localedir=None), multivalue=False, required=False) +option: Int('krbmaxticketlife', attribute=True, autofill=False, cli_name='maxlife', label=Gettext('Max life', domain='ipa', localedir=None), minvalue=1, multivalue=False, required=False) +option: Int('krbmaxrenewableage', attribute=True, autofill=False, cli_name='maxrenew', label=Gettext('Max renew', domain='ipa', localedir=None), minvalue=1, multivalue=False, required=False) option: Str('addattr*', validate_add_attribute, cli_name='addattr', exclude='webui') option: Str('setattr*', validate_set_attribute, cli_name='setattr', exclude='webui') option: Flag('rights', autofill=True, default=False, label=Gettext('Rights', domain='ipa', localedir=None)) diff --git a/ipalib/plugins/krbtpolicy.py b/ipalib/plugins/krbtpolicy.py index aba51470f..d16cb367e 100644 --- a/ipalib/plugins/krbtpolicy.py +++ b/ipalib/plugins/krbtpolicy.py @@ -69,11 +69,13 @@ class krbtpolicy(LDAPObject): cli_name='maxlife', label=_('Max life'), doc=_('Maximum ticket life (seconds)'), + minvalue=1, ), Int('krbmaxrenewableage?', cli_name='maxrenew', label=_('Max renew'), doc=_('Maximum renewable age (seconds)'), + minvalue=1, ), ) |