[2463] in Kerberos_V5_Development

home help back first fref pref prev next nref lref last post

Re: Password expiration via a preauth mechanism

daemon@ATHENA.MIT.EDU (Ken Hornstein)
Wed Jul 30 15:14:51 1997

To: "Theodore Y. Ts'o" <tytso@MIT.EDU>
Cc: krbdev@MIT.EDU
In-Reply-To: Your message of "Wed, 30 Jul 1997 14:55:00 EDT."
             <199707301855.OAA11969@dcl.MIT.EDU> 
Date: Wed, 30 Jul 1997 15:09:53 -0400
From: Ken Hornstein <kenh@cmf.nrl.navy.mil>

>Actually, if I remember correctly there's partial support for last-req
>in the KDC, although it's for certain that we're not currently using it.

What I see is:

static krb5_last_req_entry nolrentry = { KV5M_LAST_REQ_ENTRY, KRB5_LRQ_NONE, 0 }
;
static krb5_last_req_entry *nolrarray[] = { &nolrentry, 0 };

krb5_error_code
fetch_last_req_info(dbentry, lrentry)
krb5_db_entry *dbentry;
krb5_last_req_entry ***lrentry;
{
    *lrentry = nolrarray;
    return 0;
}

It was easier for me to build on the preauth framework, since it already
existed and was known to work.

--Ken

home help back first fref pref prev next nref lref last post