summaryrefslogtreecommitdiffstats
path: root/src/config
diff options
context:
space:
mode:
authorSumit Bose <sbose@redhat.com>2010-11-15 13:46:17 +0100
committerStephen Gallagher <sgallagh@redhat.com>2010-12-03 10:41:28 -0500
commitf3f9ce8024d7610439d6c70ddafab1ab025cf8a8 (patch)
tree415d65170f362c2df65410084cadbcc016b4673d /src/config
parent1709edfb690bb4ffa4b96c64d08853f47390eda3 (diff)
downloadsssd-f3f9ce8024d7610439d6c70ddafab1ab025cf8a8.tar.gz
sssd-f3f9ce8024d7610439d6c70ddafab1ab025cf8a8.tar.xz
sssd-f3f9ce8024d7610439d6c70ddafab1ab025cf8a8.zip
Add support for automatic Kerberos ticket renewal
Diffstat (limited to 'src/config')
-rw-r--r--src/config/SSSDConfig.py1
-rwxr-xr-xsrc/config/SSSDConfigTest.py9
-rw-r--r--src/config/etc/sssd.api.d/sssd-krb5.conf1
3 files changed, 8 insertions, 3 deletions
diff --git a/src/config/SSSDConfig.py b/src/config/SSSDConfig.py
index 1286e54d9..edfc823ea 100644
--- a/src/config/SSSDConfig.py
+++ b/src/config/SSSDConfig.py
@@ -106,6 +106,7 @@ option_strings = {
'krb5_store_password_if_offline' : _("Store password if offline for later online authentication"),
'krb5_renewable_lifetime' : _("Renewable lifetime of the TGT"),
'krb5_lifetime' : _("Lifetime of the TGT"),
+ 'krb5_renew_interval' : _("Time between two checks for renewal"),
# [provider/krb5/chpass]
'krb5_kpasswd' : _('Server where the change password service is running if not on the KDC'),
diff --git a/src/config/SSSDConfigTest.py b/src/config/SSSDConfigTest.py
index 3d57108a3..b51614da6 100755
--- a/src/config/SSSDConfigTest.py
+++ b/src/config/SSSDConfigTest.py
@@ -551,7 +551,8 @@ class SSSDConfigTestSSSDDomain(unittest.TestCase):
'krb5_store_password_if_offline',
'krb5_auth_timeout',
'krb5_renewable_lifetime',
- 'krb5_lifetime'])
+ 'krb5_lifetime',
+ 'krb5_renew_interval'])
options = domain.list_options()
@@ -727,7 +728,8 @@ class SSSDConfigTestSSSDDomain(unittest.TestCase):
'krb5_store_password_if_offline',
'krb5_auth_timeout',
'krb5_renewable_lifetime',
- 'krb5_lifetime']
+ 'krb5_lifetime',
+ 'krb5_renew_interval']
self.assertTrue(type(options) == dict,
"Options should be a dictionary")
@@ -877,7 +879,8 @@ class SSSDConfigTestSSSDDomain(unittest.TestCase):
'krb5_store_password_if_offline',
'krb5_auth_timeout',
'krb5_renewable_lifetime',
- 'krb5_lifetime'])
+ 'krb5_lifetime',
+ 'krb5_renew_interval'])
options = domain.list_options()
diff --git a/src/config/etc/sssd.api.d/sssd-krb5.conf b/src/config/etc/sssd.api.d/sssd-krb5.conf
index f824cfbed..86eff20e6 100644
--- a/src/config/etc/sssd.api.d/sssd-krb5.conf
+++ b/src/config/etc/sssd.api.d/sssd-krb5.conf
@@ -13,6 +13,7 @@ krb5_validate = bool, None, false
krb5_store_password_if_offline = bool, None, false
krb5_renewable_lifetime = str, None, false
krb5_lifetime = str, None, false
+krb5_renew_interval = int, None, false
[provider/krb5/chpass]