summaryrefslogtreecommitdiffstats
path: root/src/include
diff options
context:
space:
mode:
authorGreg Hudson <ghudson@mit.edu>2013-07-31 18:51:18 -0400
committerGreg Hudson <ghudson@mit.edu>2013-07-31 18:51:18 -0400
commitc5e25a236878b9807ffefe510836d1ddb59e6901 (patch)
tree960f7f64ddc9ecb508eb63393ca176bc188d46b2 /src/include
parent1c65092f874edc41c02f328608e2e44a93a6fb89 (diff)
downloadkrb5-c5e25a236878b9807ffefe510836d1ddb59e6901.tar.gz
krb5-c5e25a236878b9807ffefe510836d1ddb59e6901.tar.xz
krb5-c5e25a236878b9807ffefe510836d1ddb59e6901.zip
Document krb5_db_iterate restriction on writing
Diffstat (limited to 'src/include')
-rw-r--r--src/include/kdb.h6
1 files changed, 6 insertions, 0 deletions
diff --git a/src/include/kdb.h b/src/include/kdb.h
index 78d78c55cd..c08c8d5bee 100644
--- a/src/include/kdb.h
+++ b/src/include/kdb.h
@@ -371,6 +371,12 @@ krb5_error_code krb5_db_put_principal ( krb5_context kcontext,
krb5_db_entry *entry );
krb5_error_code krb5_db_delete_principal ( krb5_context kcontext,
krb5_principal search_for );
+
+/*
+ * Iterate over principals in the KDB. If the callback may write to the DB,
+ * the caller must get an exclusive lock with krb5_db_lock before iterating,
+ * and release it with krb5_db_unlock after iterating.
+ */
krb5_error_code krb5_db_iterate ( krb5_context kcontext,
char *match_entry,
int (*func) (krb5_pointer, krb5_db_entry *),