[30316] in CVS-changelog-for-Kerberos-V5
krb5 commit: Don't dump policies if principals are specified
daemon@ATHENA.MIT.EDU (Greg Hudson)
Sat Oct 20 01:02:54 2018
Date: Sat, 20 Oct 2018 01:00:07 -0400
From: Greg Hudson <ghudson@mit.edu>
Message-Id: <201810200500.w9K507lM013289@drugstore.mit.edu>
To: cvs-krb5@mit.edu
Reply-To: krbdev@mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cvs-krb5-bounces@mit.edu
https://github.com/krb5/krb5/commit/911d592a85cb5d4e793c83cf702178d14ac21e6d
commit 911d592a85cb5d4e793c83cf702178d14ac21e6d
Author: Greg Hudson <ghudson@mit.edu>
Date: Mon Oct 15 18:32:31 2018 -0400
Don't dump policies if principals are specified
If kdb5_util dump is asked to filter for specific principals, do not
dump the policy database.
ticket: 8752 (new)
src/kadmin/dbutil/dump.c | 3 ++-
1 files changed, 2 insertions(+), 1 deletions(-)
diff --git a/src/kadmin/dbutil/dump.c b/src/kadmin/dbutil/dump.c
index c792afd..86e046c 100644
--- a/src/kadmin/dbutil/dump.c
+++ b/src/kadmin/dbutil/dump.c
@@ -1453,7 +1453,8 @@ dump_db(int argc, char **argv)
goto error;
}
- if (dump->dump_policy != NULL) {
+ /* Don't dump policies if specific principal entries were requested. */
+ if (dump->dump_policy != NULL && args.nnames == 0) {
ret = krb5_db_iter_policy(util_context, "*", dump->dump_policy, &args);
if (ret) {
com_err(progname, ret, _("performing %s dump"), dump->name);
_______________________________________________
cvs-krb5 mailing list
cvs-krb5@mit.edu
https://mailman.mit.edu/mailman/listinfo/cvs-krb5
