diff options
| author | Greg Hudson <ghudson@mit.edu> | 2010-02-11 16:07:08 +0000 |
|---|---|---|
| committer | Greg Hudson <ghudson@mit.edu> | 2010-02-11 16:07:08 +0000 |
| commit | fe68c6595b7f90ec6891b4dbb0b227ee859090e5 (patch) | |
| tree | 4f895b242e5493408169ba48e897cc1c2859a380 /src/lib/gssapi | |
| parent | 079eed2cf749702f75ddc385cf943fbab931f9d8 (diff) | |
| download | krb5-fe68c6595b7f90ec6891b4dbb0b227ee859090e5.tar.gz krb5-fe68c6595b7f90ec6891b4dbb0b227ee859090e5.tar.xz krb5-fe68c6595b7f90ec6891b4dbb0b227ee859090e5.zip | |
Minimal support for updating history key
Add minimal support for re-randomizing the history key:
* cpw -randkey kadmin/history now works, but creates only one key.
* cpw -randkey -keepold kadmin/history still fails.
* libkadm5 no longer caches the history key. Performance impact
is minimal since password changes are not common.
* randkey no longer checks the newly randomized key against old keys,
and the disabled code to do so in setkey/setv4key is gone, so now
only kadm5_chpass_principal_3 accesses the password history.
ticket: 6660
target_version: 1.8
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23716 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/lib/gssapi')
0 files changed, 0 insertions, 0 deletions