diff options
| author | Simo Sorce <ssorce@redhat.com> | 2011-06-10 14:25:03 -0400 |
|---|---|---|
| committer | Simo Sorce <ssorce@redhat.com> | 2011-08-26 08:24:49 -0400 |
| commit | 0a4f7960b9cb2cc43c014a9ba5f96ddfbf5713fe (patch) | |
| tree | 1b66f96cfc6ae1d6c0f0cb1cd85994cedef8a380 /daemons/ipa-kdb/ipa_kdb.c | |
| parent | e9e426354f28ca01586b1b5ef7130b19b392232b (diff) | |
| download | freeipa-0a4f7960b9cb2cc43c014a9ba5f96ddfbf5713fe.tar.gz freeipa-0a4f7960b9cb2cc43c014a9ba5f96ddfbf5713fe.tar.xz freeipa-0a4f7960b9cb2cc43c014a9ba5f96ddfbf5713fe.zip | |
ipa-kdb: Get/Store Master Key directly from LDAP
Diffstat (limited to 'daemons/ipa-kdb/ipa_kdb.c')
| -rw-r--r-- | daemons/ipa-kdb/ipa_kdb.c | 21 |
1 files changed, 13 insertions, 8 deletions
diff --git a/daemons/ipa-kdb/ipa_kdb.c b/daemons/ipa-kdb/ipa_kdb.c index 0f63bc83c..394cdb7b6 100644 --- a/daemons/ipa-kdb/ipa_kdb.c +++ b/daemons/ipa-kdb/ipa_kdb.c @@ -307,21 +307,26 @@ static krb5_error_code ipadb_init_module(krb5_context kcontext, ipactx = ipadb_get_context(kcontext); ipadb_context_free(kcontext, &ipactx); + ipactx = calloc(1, sizeof(struct ipadb_context)); + if (!ipactx) { + return ENOMEM; + } + /* only check for unsupported 'temporary' value for now */ for (i = 0; db_args != NULL && db_args[i] != NULL; i++) { + if (strncmp(db_args[i], IPA_SETUP, sizeof(IPA_SETUP)) == 0) { + ipactx->override_restrictions = true; + } + if (strncmp(db_args[i], "temporary", 9) == 0) { krb5_set_error_message(kcontext, EINVAL, "Plugin requires -update argument!"); - return EINVAL; + ret = EINVAL; + goto fail; } } - ipactx = calloc(1, sizeof(struct ipadb_context)); - if (!ipactx) { - return ENOMEM; - } - ipactx->kcontext = kcontext; kerr = krb5_get_default_realm(kcontext, &ipactx->realm); @@ -469,9 +474,9 @@ kdb_vftabl kdb_function_table = { ipadb_free_policy, /* free_policy */ ipadb_alloc, /* alloc */ ipadb_free, /* free */ - NULL, /* fetch_master_key */ + ipadb_fetch_master_key, /* fetch_master_key */ NULL, /* fetch_master_key_list */ - NULL, /* store_master_key_list */ + ipadb_store_master_key_list, /* store_master_key_list */ NULL, /* dbe_search_enctype */ NULL, /* change_pwd */ NULL, /* promote_db */ |