Policy extensions + new policy: allowed ks types

This simply adds KADM5_API_VERSION_4 and various fields to the
policy structures:

 - attributes         (policy-ish principal attributes)
 - max_life           (max ticket life)
 - max_renewable_life (max ticket renewable life)
 - allowed_keysalts   (allowed key/salt types)
 - TL data            (future policy extensions)

Of these only allowed_keysalts is currently implemented.

Some refactoring of TL data handling is also done.

ticket: 7223 (new)

1 files changed, 13 insertions, 2 deletions

diff --git a/src/lib/kadm5/misc_free.c b/src/lib/kadm5/misc_free.c
index 1d7079199..497b8c2b6 100644
--- a/src/lib/kadm5/misc_free.c
+++ b/src/lib/kadm5/misc_free.c
@@ -11,10 +11,21 @@
 kadm5_ret_t
 kadm5_free_policy_ent(void *server_handle, kadm5_policy_ent_t val)
 {
+    krb5_tl_data *tl_next;
+
     _KADM5_CHECK_HANDLE(server_handle);
 
-    if (val)
-        free(val->policy);
+    if (val == NULL)
+        return KADM5_OK;
+
+    free(val->policy);
+    free(val->allowed_keysalts);
+    for (; val->tl_data; val->tl_data = tl_next) {
+        tl_next = val->tl_data->tl_data_next;
+        free(val->tl_data->tl_data_contents);
+        free(val->tl_data);
+    }
+    memset(val, 0, sizeof(*val));
     return KADM5_OK;
 }