diff options
| author | Barry Jaspan <bjaspan@mit.edu> | 1996-10-30 18:12:37 +0000 |
|---|---|---|
| committer | Barry Jaspan <bjaspan@mit.edu> | 1996-10-30 18:12:37 +0000 |
| commit | cc03b6ee2575a14f1230bc09ad7afb65f1f1162a (patch) | |
| tree | ec2b19029e1d92822696e723563006f54c69ce86 | |
| parent | a8310b6fd5ff1c05568364472ca5469cabc28831 (diff) | |
| download | krb5-cc03b6ee2575a14f1230bc09ad7afb65f1f1162a.tar.gz krb5-cc03b6ee2575a14f1230bc09ad7afb65f1f1162a.tar.xz krb5-cc03b6ee2575a14f1230bc09ad7afb65f1f1162a.zip | |
include some more detail on the kadmin/admin and kadmin/changepw
distinction [krb5-doc/130]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9252 dc483132-0cff-0310-8789-dd5450dbe970
| -rw-r--r-- | doc/kadm5/api-funcspec.tex | 11 |
1 files changed, 9 insertions, 2 deletions
diff --git a/doc/kadm5/api-funcspec.tex b/doc/kadm5/api-funcspec.tex index 5def7a78ac..e799eacc44 100644 --- a/doc/kadm5/api-funcspec.tex +++ b/doc/kadm5/api-funcspec.tex @@ -772,8 +772,15 @@ service principal, but the sets of operations that can be performed by a request authenticated to each service are different. In particular, only the functions chpass_principal, randkey_principal, get_principal, and get_policy can be performed by a request authenticated to the -kadmin/changepw service. The function semantics descriptions below -give the precise details. +kadmin/changepw service, and they can only be performed when the +target principal of the operation is the same as the authenticated +client principal; the function semantics descriptions below give the +precise details. This means that administrative operations can only +be performed when authenticated to the kadmin/admin service. The +reason for this distinction is that tickets for kadmin/changepw can be +acquired with an expired password, and the KADM system does not want +to allow an administrator with an expired password to perform +administrative operations on arbitrary principals. Each Admin API operation authenticated to the kadmin/admin service requires a specific authorization to run. This version uses a simple |