From 55d0fcac60b575123e997abf583bc8cd501e8fae Mon Sep 17 00:00:00 2001 From: Greg Hudson Date: Mon, 27 Apr 2009 15:42:23 +0000 Subject: Move KRB5_KDB_OK_AS_DELEGATE from kdb_ext.h to kdb.h. Add kadmin support for the flag. In the KDC, remove the restriction on returning the flag on cross-realm TGTs since there is now a defined meaning for that (it allows ok-as-delegate to be honored on the foreign realm's service tickets). ticket: 5596 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22281 dc483132-0cff-0310-8789-dd5450dbe970 --- src/include/kdb.h | 1 + src/include/kdb_ext.h | 2 -- 2 files changed, 1 insertion(+), 2 deletions(-) (limited to 'src/include') diff --git a/src/include/kdb.h b/src/include/kdb.h index 8b681ef81..ea81cfeef 100644 --- a/src/include/kdb.h +++ b/src/include/kdb.h @@ -95,6 +95,7 @@ #define KRB5_KDB_PWCHANGE_SERVICE 0x00002000 #define KRB5_KDB_SUPPORT_DESMD5 0x00004000 #define KRB5_KDB_NEW_PRINC 0x00008000 +#define KRB5_KDB_OK_AS_DELEGATE 0x00100000 /* Creation flags */ #define KRB5_KDB_CREATE_BTREE 0x00000001 diff --git a/src/include/kdb_ext.h b/src/include/kdb_ext.h index 87959538e..59323e232 100644 --- a/src/include/kdb_ext.h +++ b/src/include/kdb_ext.h @@ -31,8 +31,6 @@ #ifndef KRB5_KDB5_EXT__ #define KRB5_KDB5_EXT__ -/* Can be delegated as in TicketFlags */ -#define KRB5_KDB_OK_AS_DELEGATE 0x00100000 /* Allowed to use protocol transition */ #define KRB5_KDB_OK_TO_AUTH_AS_DELEGATE 0x00200000 /* Service does not require authorization data */ -- cgit