summaryrefslogtreecommitdiffstats
path: root/src/admin/create
diff options
context:
space:
mode:
authorJohn Kohl <jtkohl@mit.edu>1990-05-01 17:10:14 +0000
committerJohn Kohl <jtkohl@mit.edu>1990-05-01 17:10:14 +0000
commit90373bcc141a33d7b36adfb104b2f3cb4d98a901 (patch)
treecaed21f5fd14db4d7ac6da660d3e9bf63d50a0e2 /src/admin/create
parent3eaad098ddb0295a21d632adabc22026af3ddc78 (diff)
downloadkrb5-90373bcc141a33d7b36adfb104b2f3cb4d98a901.tar.gz
krb5-90373bcc141a33d7b36adfb104b2f3cb4d98a901.tar.xz
krb5-90373bcc141a33d7b36adfb104b2f3cb4d98a901.zip
turn on KRB5_KDB_DISALLOW_ALL_TIX for master key
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@653 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/admin/create')
-rw-r--r--src/admin/create/kdb5_create.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/src/admin/create/kdb5_create.c b/src/admin/create/kdb5_create.c
index aff1d3035..001a4a91a 100644
--- a/src/admin/create/kdb5_create.c
+++ b/src/admin/create/kdb5_create.c
@@ -284,6 +284,7 @@ struct realm_info *pblock;
switch (op) {
case MASTER_KEY:
+ entry.attributes |= KRB5_KDB_DISALLOW_ALL_TIX;
if (retval = krb5_kdb_encrypt_key(pblock->eblock,
&master_keyblock,
&ekey))