Account lockout
authorGreg Hudson <ghudson@mit.edu>
Sun, 25 Oct 2009 16:55:12 +0000 (16:55 +0000)
committerGreg Hudson <ghudson@mit.edu>
Sun, 25 Oct 2009 16:55:12 +0000 (16:55 +0000)
commit8d31a9d396f5bea88def4db395ad12dca2ac2e9f
tree244f8f5b525432a2a2a280403f38d7b2fbdc0dfd
parentb82e46df9b6cbf663512985a99c6d79f2b0cb796
Account lockout

Merge Luke's users/lhoward/lockout2 branch to trunk.  Implements
account lockout policies for preauth-using principals using existing
principal metadata fields and new policy fields.  The kadmin API
version is bumped from 2 to 3 to compatibly extend the policy_ent_rec
structure.

ticket: 6577

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23038 dc483132-0cff-0310-8789-dd5450dbe970
79 files changed:
src/include/iprop.h
src/include/iprop_hdr.h
src/include/kdb.h
src/kadmin/cli/kadmin.c
src/kadmin/dbutil/dump.c
src/kadmin/dbutil/kadm5_create.c
src/kadmin/dbutil/kdb5_util.M
src/kadmin/dbutil/kdb5_util.c
src/kadmin/server/ipropd_svc.c
src/kadmin/server/ovsec_kadmd.c
src/kadmin/server/server_stubs.c
src/kadmin/testing/scripts/init_db
src/kadmin/testing/scripts/start_servers_local
src/kadmin/testing/tcl/util.t
src/kadmin/testing/util/tcl_kadm5.c
src/kdc/do_as_req.c
src/kdc/extern.c
src/kdc/main.c
src/lib/kadm5/admin.h
src/lib/kadm5/admin_internal.h
src/lib/kadm5/clnt/client_init.c
src/lib/kadm5/kadm_rpc_xdr.c
src/lib/kadm5/server_internal.h
src/lib/kadm5/srv/server_init.c
src/lib/kadm5/srv/server_kdb.c
src/lib/kadm5/srv/svr_policy.c
src/lib/kadm5/srv/svr_principal.c
src/lib/kadm5/unit-test/api.2/mod-principal-v2.exp
src/lib/kadm5/unit-test/api.3/chpass-principal-v2.exp [new file with mode: 0644]
src/lib/kadm5/unit-test/api.3/chpass-principal.exp [new file with mode: 0644]
src/lib/kadm5/unit-test/api.3/crte-policy.exp [new file with mode: 0644]
src/lib/kadm5/unit-test/api.3/crte-principal.exp [new file with mode: 0644]
src/lib/kadm5/unit-test/api.3/destroy.exp [new file with mode: 0644]
src/lib/kadm5/unit-test/api.3/dlte-policy.exp [new file with mode: 0644]
src/lib/kadm5/unit-test/api.3/dlte-principal.exp [new file with mode: 0644]
src/lib/kadm5/unit-test/api.3/get-policy.exp [new file with mode: 0644]
src/lib/kadm5/unit-test/api.3/get-principal-v2.exp [new file with mode: 0644]
src/lib/kadm5/unit-test/api.3/get-principal.exp [new file with mode: 0644]
src/lib/kadm5/unit-test/api.3/init-v2.exp [new file with mode: 0644]
src/lib/kadm5/unit-test/api.3/init.exp [new file with mode: 0644]
src/lib/kadm5/unit-test/api.3/mod-policy.exp [new file with mode: 0644]
src/lib/kadm5/unit-test/api.3/mod-principal-v2.exp [new file with mode: 0644]
src/lib/kadm5/unit-test/api.3/mod-principal.exp [new file with mode: 0644]
src/lib/kadm5/unit-test/api.3/randkey-principal-v2.exp [new file with mode: 0644]
src/lib/kadm5/unit-test/api.3/randkey-principal.exp [new file with mode: 0644]
src/lib/kadm5/unit-test/config/unix.exp
src/lib/kadm5/unit-test/destroy-test.c
src/lib/kadm5/unit-test/handle-test.c
src/lib/kadm5/unit-test/init-test.c
src/lib/kadm5/unit-test/iter-test.c
src/lib/kadm5/unit-test/lib/lib.t
src/lib/kadm5/unit-test/randkey-test.c
src/lib/kadm5/unit-test/setkey-test.c
src/lib/kdb/iprop.x
src/lib/kdb/kdb_convert.c
src/plugins/kdb/db2/Makefile.in
src/plugins/kdb/db2/db2_exp.c
src/plugins/kdb/db2/kdb_db2.c
src/plugins/kdb/db2/kdb_db2.h
src/plugins/kdb/db2/kdb_ext.c [new file with mode: 0644]
src/plugins/kdb/db2/lockout.c [new file with mode: 0644]
src/plugins/kdb/db2/pol_xdr.c
src/plugins/kdb/db2/policy_db.h
src/plugins/kdb/ldap/ldap_exp.c
src/plugins/kdb/ldap/libkdb_ldap/Makefile.in
src/plugins/kdb/ldap/libkdb_ldap/kdb_ext.c [new file with mode: 0644]
src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap.c
src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap.h
src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap_conn.c
src/plugins/kdb/ldap/libkdb_ldap/kerberos.ldif
src/plugins/kdb/ldap/libkdb_ldap/kerberos.schema
src/plugins/kdb/ldap/libkdb_ldap/ldap_principal.h
src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c
src/plugins/kdb/ldap/libkdb_ldap/ldap_pwd_policy.c
src/plugins/kdb/ldap/libkdb_ldap/ldap_service_rights.c
src/plugins/kdb/ldap/libkdb_ldap/libkdb_ldap.exports
src/plugins/kdb/ldap/libkdb_ldap/lockout.c [new file with mode: 0644]
src/slave/kpropd.c
src/slave/kslave_update