summaryrefslogtreecommitdiffstats
path: root/src/config
diff options
context:
space:
mode:
authorSumit Bose <sbose@redhat.com>2010-11-08 16:00:57 +0100
committerStephen Gallagher <sgallagh@redhat.com>2010-12-03 10:41:28 -0500
commitc8b8901b05da9e31dba320f305ec20301e928cfb (patch)
treed503cc9d102a727a100dd6e599290e862f64cdb0 /src/config
parent7470bb938429c7a723f5aad971cc50a805a9ead8 (diff)
downloadsssd-c8b8901b05da9e31dba320f305ec20301e928cfb.tar.gz
sssd-c8b8901b05da9e31dba320f305ec20301e928cfb.tar.xz
sssd-c8b8901b05da9e31dba320f305ec20301e928cfb.zip
Add krb5_renewable_lifetime option
Diffstat (limited to 'src/config')
-rw-r--r--src/config/SSSDConfig.py1
-rwxr-xr-xsrc/config/SSSDConfigTest.py9
-rw-r--r--src/config/etc/sssd.api.d/sssd-krb5.conf1
3 files changed, 8 insertions, 3 deletions
diff --git a/src/config/SSSDConfig.py b/src/config/SSSDConfig.py
index 1f54b4757..bb7e424e9 100644
--- a/src/config/SSSDConfig.py
+++ b/src/config/SSSDConfig.py
@@ -104,6 +104,7 @@ option_strings = {
'krb5_keytab' : _("Location of the keytab to validate credentials"),
'krb5_validate' : _("Enable credential validation"),
'krb5_store_password_if_offline' : _("Store password if offline for later online authentication"),
+ 'krb5_renewable_lifetime' : _("Renewable lifetime of the TGT"),
# [provider/krb5/chpass]
'krb5_kpasswd' : _('Server where the change password service is running if not on the KDC'),
diff --git a/src/config/SSSDConfigTest.py b/src/config/SSSDConfigTest.py
index 39db49dc3..b63e40b57 100755
--- a/src/config/SSSDConfigTest.py
+++ b/src/config/SSSDConfigTest.py
@@ -549,7 +549,8 @@ class SSSDConfigTestSSSDDomain(unittest.TestCase):
'krb5_keytab',
'krb5_validate',
'krb5_store_password_if_offline',
- 'krb5_auth_timeout'])
+ 'krb5_auth_timeout',
+ 'krb5_renewable_lifetime'])
options = domain.list_options()
@@ -723,7 +724,8 @@ class SSSDConfigTestSSSDDomain(unittest.TestCase):
'krb5_keytab',
'krb5_validate',
'krb5_store_password_if_offline',
- 'krb5_auth_timeout']
+ 'krb5_auth_timeout',
+ 'krb5_renewable_lifetime']
self.assertTrue(type(options) == dict,
"Options should be a dictionary")
@@ -871,7 +873,8 @@ class SSSDConfigTestSSSDDomain(unittest.TestCase):
'krb5_keytab',
'krb5_validate',
'krb5_store_password_if_offline',
- 'krb5_auth_timeout'])
+ 'krb5_auth_timeout',
+ 'krb5_renewable_lifetime'])
options = domain.list_options()
diff --git a/src/config/etc/sssd.api.d/sssd-krb5.conf b/src/config/etc/sssd.api.d/sssd-krb5.conf
index 0c0aa4261..c3cc5bbf8 100644
--- a/src/config/etc/sssd.api.d/sssd-krb5.conf
+++ b/src/config/etc/sssd.api.d/sssd-krb5.conf
@@ -11,6 +11,7 @@ krb5_ccname_template = str, None, false
krb5_keytab = str, None, false
krb5_validate = bool, None, false
krb5_store_password_if_offline = bool, None, false
+krb5_renewable_lifetime = str, None, false
[provider/krb5/chpass]