[7997] in Kerberos
Re: krb5b7 under linux-2.0.10
daemon@ATHENA.MIT.EDU (Barry Jaspan)
Tue Sep 17 15:28:30 1996
Date: Tue, 17 Sep 1996 15:12:24 -0400
From: "Barry Jaspan" <bjaspan@MIT.EDU>
To: Christopher Seawood <cseawood@qualcomm.com>
Cc: kerberos@MIT.EDU
In-Reply-To: [7996]
3) modprinc doesn't like the -maxrenewlife flag. I tracked this
one down to be an oversight in lib/kadm5/server_internal..h. You'll need to
add KADM5_MAX_RLIFE to the #define list of ALL_PRINC_MASK on line 78.
Ooops. I have applied this patch to the source tree, and the
-maxrenewlife command works now:
% ./kadmin.local
kadmin.local: modprinc -maxrenewlife "20 minutes" testuser
Principal "testuser@SECURE-TEST.OV.COM" modified.
kadmin.local: getprinc testuser
Principal: testuser@SECURE-TEST.OV.COM
Expiration date: [never]
Last password change: Tue Sep 17 14:51:05 EDT 1996
Password expiration date: [none]
Maximum ticket life: 0 days 10:00:00
Maximum renewable life: 0 days 00:20:00
Last modified: Tue Sep 17 15:11:36 EDT 1996 (bjaspan/admin@ATHENA.MIT.EDU)
Last successful authentication: [never]
Last failed authentication: [never]
Failed password attempts: 0
Number of keys: 2
Key: vno 1, DES cbc mode with CRC-32, no salt
Key: vno 1, DES cbc mode with CRC-32, Version 4
Attributes:
Policy: [none]
kadmin.local:
Thanks for the bug report!
Barry