From ab7e70248763ae176f8ea419df6d8b1c4c2eb1d6 Mon Sep 17 00:00:00 2001
From: Pavel Zuna <pzuna@redhat.com>
Date: Mon, 7 Feb 2011 10:10:12 -0500
Subject: Set minimum for Kerberos policy max life and max renew.

Fix #847
---
 ipalib/plugins/krbtpolicy.py | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'ipalib')

diff --git a/ipalib/plugins/krbtpolicy.py b/ipalib/plugins/krbtpolicy.py
index aba51470..d16cb367 100644
--- a/ipalib/plugins/krbtpolicy.py
+++ b/ipalib/plugins/krbtpolicy.py
@@ -69,11 +69,13 @@ class krbtpolicy(LDAPObject):
             cli_name='maxlife',
             label=_('Max life'),
             doc=_('Maximum ticket life (seconds)'),
+            minvalue=1,
         ),
         Int('krbmaxrenewableage?',
             cli_name='maxrenew',
             label=_('Max renew'),
             doc=_('Maximum renewable age (seconds)'),
+            minvalue=1,
         ),
     )
 
-- 
cgit