diff options
| author | Greg Hudson <ghudson@mit.edu> | 2010-05-10 22:42:04 +0000 |
|---|---|---|
| committer | Greg Hudson <ghudson@mit.edu> | 2010-05-10 22:42:04 +0000 |
| commit | 6eacb6d5f29da306ea605a5efb00c0d01c3182b1 (patch) | |
| tree | 8b37e7da4e702e962560823515da5a744c5edf7c /src/include | |
| parent | f795c92a96a2a559fe01fc5906d488167ab6b4b9 (diff) | |
| download | krb5-6eacb6d5f29da306ea605a5efb00c0d01c3182b1.tar.gz krb5-6eacb6d5f29da306ea605a5efb00c0d01c3182b1.tar.xz krb5-6eacb6d5f29da306ea605a5efb00c0d01c3182b1.zip | |
Add lockout-related performance tuning variables
The account lockout feature of krb5 1.8 came at a cost in database
accesses for principals requiring preauth, even if lockout is not
used. Add dbmodules variables disable_last_success and
disable_lockout for the DB2 and LDAP back ends, allowing the admin to
recover the lost performance at the cost of new functionality.
(Unrelated documentation fix: document database_name as a DB2-specific
dbmodules variable instead of the realm variable it used to be.)
ticket: 6719
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24003 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/include')
| -rw-r--r-- | src/include/k5-int.h | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/src/include/k5-int.h b/src/include/k5-int.h index 9a23a7e68..fc39acdc7 100644 --- a/src/include/k5-int.h +++ b/src/include/k5-int.h @@ -203,6 +203,8 @@ typedef INT64_TYPE krb5_int64; #define KRB5_CONF_DEFAULT_PRINCIPAL_EXPIRATION "default_principal_expiration" #define KRB5_CONF_DEFAULT_PRINCIPAL_FLAGS "default_principal_flags" #define KRB5_CONF_DICT_FILE "dict_file" +#define KRB5_CONF_DISABLE_LAST_SUCCESS "disable_last_success" +#define KRB5_CONF_DISABLE_LOCKOUT "disable_lockout" #define KRB5_CONF_DNS_LOOKUP_KDC "dns_lookup_kdc" #define KRB5_CONF_DNS_LOOKUP_REALM "dns_lookup_realm" #define KRB5_CONF_DNS_FALLBACK "dns_fallback" |