turn on KRB5_KDB_DISALLOW_ALL_TIX for master key

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@653 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/admin/create/kdb5_create.c b/src/admin/create/kdb5_create.c
index aff1d3035a6e9e383256fe95980985005b432209..001a4a91a738b0db82fd5d56920c4b3a674123e9 100644 (file)
--- a/src/admin/create/kdb5_create.c
+++ b/src/admin/create/kdb5_create.c
@@ -284,6 +284,7 @@ struct realm_info *pblock;
 
     switch (op) {
     case MASTER_KEY:
+       entry.attributes |= KRB5_KDB_DISALLOW_ALL_TIX;
        if (retval = krb5_kdb_encrypt_key(pblock->eblock,
                                          &master_keyblock,
                                          &ekey))