From 90373bcc141a33d7b36adfb104b2f3cb4d98a901 Mon Sep 17 00:00:00 2001
From: John Kohl <jtkohl@mit.edu>
Date: Tue, 1 May 1990 17:10:14 +0000
Subject: [PATCH] turn on KRB5_KDB_DISALLOW_ALL_TIX for master key

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@653 dc483132-0cff-0310-8789-dd5450dbe970
---
 src/admin/create/kdb5_create.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/admin/create/kdb5_create.c b/src/admin/create/kdb5_create.c
index aff1d3035..001a4a91a 100644
--- a/src/admin/create/kdb5_create.c
+++ b/src/admin/create/kdb5_create.c
@@ -284,6 +284,7 @@ struct realm_info *pblock;
 
     switch (op) {
     case MASTER_KEY:
+	entry.attributes |= KRB5_KDB_DISALLOW_ALL_TIX;
 	if (retval = krb5_kdb_encrypt_key(pblock->eblock,
 					  &master_keyblock,
 					  &ekey))
-- 
2.26.2