From f352702d6785fc5f59698dba73d415f994b4ce7d Mon Sep 17 00:00:00 2001 From: Simo Sorce Date: Thu, 19 Sep 2013 12:50:35 -0400 Subject: ipa-getkeytab: Add support for get_keytab extop This new extended operation is tried by default and then the code falls back to the old method if it fails. The new method allows for server side password generation as well as retrieval of existing credentials w/o causing regeneration of keys on the server. Resolves: https://fedorahosted.org/freeipa/ticket/3859 Reviewed-By: Nathaniel McCallum --- util/ipa_krb5.h | 3 +++ 1 file changed, 3 insertions(+) (limited to 'util/ipa_krb5.h') diff --git a/util/ipa_krb5.h b/util/ipa_krb5.h index 2431fd70b..1e036e4f8 100644 --- a/util/ipa_krb5.h +++ b/util/ipa_krb5.h @@ -69,6 +69,9 @@ void free_keys_contents(krb5_context krbctx, struct keys_container *keys); struct berval *create_key_control(struct keys_container *keys, const char *principalName); +int ipa_string_to_enctypes(const char *str, struct krb_key_salt **encsalts, + int *num_encsalts, char **err_msg); + int create_keys(krb5_context krbctx, krb5_principal princ, char *password, -- cgit