Add LDAP back end support for canonical name attribute
authorGreg Hudson <ghudson@mit.edu>
Sun, 15 Mar 2009 04:21:12 +0000 (04:21 +0000)
committerGreg Hudson <ghudson@mit.edu>
Sun, 15 Mar 2009 04:21:12 +0000 (04:21 +0000)
commit9f5c76195365eb20430a0c2207ec7904e192eae4
tree03ac7866f743bf8a34682dc840bb47e644d90467
parent51e4d988e508897bb9255161838df86ecab3f8eb
Add LDAP back end support for canonical name attribute

Add a krbCanonicalName attribute to the schema.  When looking up a
principal, if the canonical name is set and does not match the
requested name, then return the entry only if canonicalization was
requested, and use the entry's canonical name.

ticket: 6420
tags: pullup
target_version: 1.7

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22090 dc483132-0cff-0310-8789-dd5450dbe970
src/plugins/kdb/ldap/libkdb_ldap/kerberos.ldif
src/plugins/kdb/ldap/libkdb_ldap/kerberos.schema
src/plugins/kdb/ldap/libkdb_ldap/ldap_principal.c
src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c