From: John Kohl <jtkohl@mit.edu>
Date: Tue, 1 May 1990 17:10:14 +0000 (+0000)
Subject: turn on KRB5_KDB_DISALLOW_ALL_TIX for master key
X-Git-Tag: krb5-1.0-alpha2~743
X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=90373bcc141a33d7b36adfb104b2f3cb4d98a901;p=krb5.git

turn on KRB5_KDB_DISALLOW_ALL_TIX for master key

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@653 dc483132-0cff-0310-8789-dd5450dbe970
---

diff --git a/src/admin/create/kdb5_create.c b/src/admin/create/kdb5_create.c
index aff1d3035..001a4a91a 100644
--- a/src/admin/create/kdb5_create.c
+++ b/src/admin/create/kdb5_create.c
@@ -284,6 +284,7 @@ struct realm_info *pblock;
 
     switch (op) {
     case MASTER_KEY:
+	entry.attributes |= KRB5_KDB_DISALLOW_ALL_TIX;
 	if (retval = krb5_kdb_encrypt_key(pblock->eblock,
 					  &master_keyblock,
 					  &ekey))