[28838] in CVS-changelog-for-Kerberos-V5
krb5 commit [krb5-1.13]: Document correct flag names for kadm5.acl
daemon@ATHENA.MIT.EDU (Tom Yu)
Wed Mar 18 16:25:08 2015
Date: Wed, 18 Mar 2015 16:25:02 -0400
From: Tom Yu <tlyu@mit.edu>
Message-Id: <201503182025.t2IKP2bk020273@drugstore.mit.edu>
To: cvs-krb5@mit.edu
Reply-To: krbdev@mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cvs-krb5-bounces@mit.edu
https://github.com/krb5/krb5/commit/185114aa35508e46c90354d8ddea76f65fe556d8
commit 185114aa35508e46c90354d8ddea76f65fe556d8
Author: Greg Hudson <ghudson@mit.edu>
Date: Fri Mar 13 12:45:27 2015 -0400
Document correct flag names for kadm5.acl
kadm5.acl entries can include restrictions which can force flag values
on or off. These flag values are parsed with krb5_string_to_flags(),
which means the flag names are the ones for default_principal_flags,
not the ones for kadmin addprinc/modprinc.
(cherry picked from commit ef21069070c1eb2ab1ade1d1406f5cd3920c83a9)
ticket: 8155
version_fixed: 1.13.2
status: resolved
doc/admin/conf_files/kadm5_acl.rst | 4 ++--
1 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/doc/admin/conf_files/kadm5_acl.rst b/doc/admin/conf_files/kadm5_acl.rst
index 009067e..2a6e634 100644
--- a/doc/admin/conf_files/kadm5_acl.rst
+++ b/doc/admin/conf_files/kadm5_acl.rst
@@ -72,8 +72,8 @@ ignored. Lines containing ACL entries have the format::
{+\|-}\ *flagname*
flag is forced to the indicated value. The permissible flags
- are the same as the + and - flags for the kadmin
- :ref:`add_principal` and :ref:`modify_principal` commands.
+ are the same as those for the **default_principal_flags**
+ variable in :ref:`kdc.conf(5)`.
*-clearpolicy*
policy is forced to be empty.
_______________________________________________
cvs-krb5 mailing list
cvs-krb5@mit.edu
https://mailman.mit.edu/mailman/listinfo/cvs-krb5
