From 2e22963a2d71647763fefc991c8564361bb0aef4 Mon Sep 17 00:00:00 2001
From: Pavel Zuna <pzuna@redhat.com>
Date: Tue, 12 Jan 2010 16:30:00 +0100
Subject: Add default values for krb ticket policy attributes during
 installation.

---
 install/share/bootstrap-template.ldif | 2 ++
 install/share/default-keytypes.ldif   | 6 ++++++
 2 files changed, 8 insertions(+)

diff --git a/install/share/bootstrap-template.ldif b/install/share/bootstrap-template.ldif
index c71f15108..ffee8750f 100644
--- a/install/share/bootstrap-template.ldif
+++ b/install/share/bootstrap-template.ldif
@@ -70,6 +70,7 @@ objectClass: top
 objectClass: person
 objectClass: posixaccount
 objectClass: krbprincipalaux
+objectClass: krbticketpolicyaux
 objectClass: inetuser
 uid: admin
 krbPrincipalName: admin@$REALM
@@ -165,6 +166,7 @@ ipaUserObjectClasses: inetorgperson
 ipaUserObjectClasses: inetuser
 ipaUserObjectClasses: posixaccount
 ipaUserObjectClasses: krbprincipalaux
+ipaUserObjectClasses: krbticketpolicyaux
 ipaUserObjectClasses: radiusprofile
 ipaUserObjectClasses: ipaobject
 ipaDefaultEmailDomain: $DOMAIN
diff --git a/install/share/default-keytypes.ldif b/install/share/default-keytypes.ldif
index 1d54a0596..8561b98dc 100644
--- a/install/share/default-keytypes.ldif
+++ b/install/share/default-keytypes.ldif
@@ -11,6 +11,12 @@ krbSupportedEncSaltTypes: des-cbc-md5:normal
 krbSupportedEncSaltTypes: des-cbc-crc:normal
 krbSupportedEncSaltTypes: des-cbc-crc:v4
 krbSupportedEncSaltTypes: des-cbc-crc:afs3
+-
+add: krbMaxTicketLife
+krbMaxTicketLife: 86400
+-
+add: krbMaxRenewableAge
+krbMaxRenewableAge: 604800
 
 #kerberos keytypes
 dn: cn=$REALM,cn=kerberos,$SUFFIX
-- 
cgit