~ubuntu-branches/ubuntu/maverick/krb5/maverick

« back to all changes in this revision

Viewing changes to src/lib/kadm5/srv/server_acl.h

  • Committer: Bazaar Package Importer
  • Author(s): Sam Hartman
  • Date: 2009-05-07 16:16:34 UTC
  • mfrom: (13.1.7 sid)
  • Revision ID: james.westby@ubuntu.com-20090507161634-xqyk0s9na0le4flj
Tags: 1.7dfsg~beta1-4
When  decrypting the TGS response fails with the subkey, try with the
session key to work around Heimdal bug, Closes: #527353 

Show diffs side-by-side

added added

removed removed

Lines of Context:
1
1
/*
2
2
 * lib/kadm5/srv/server_acl.h
3
3
 *
4
 
 * Copyright 1995-2004 by the Massachusetts Institute of Technology.
 
4
 * Copyright 1995-2004, 2007, 2008 by the Massachusetts Institute of Technology.
5
5
 * All Rights Reserved.
6
6
 *
7
7
 * Export of this software from the United States of America may
45
45
#else   /* DEBUG */
46
46
#define DPRINT(l1, cl, al)
47
47
#endif  /* DEBUG */
48
 
#define DLOG(l1, cl, msg)       if ((cl & l1) != 0)     \
49
 
                                        com_err(programname, 0, msg)
50
48
 
51
49
/*
52
50
 * Access control bits.
60
58
/* #define ACL_EXTRACT          64 */
61
59
#define ACL_LIST                128
62
60
#define ACL_SETKEY              256
 
61
#define ACL_IPROP               512
63
62
#define ACL_RENAME              (ACL_ADD+ACL_DELETE)
64
63
 
65
64
#define ACL_ALL_MASK            (ACL_ADD        | \
68
67
                                 ACL_CHANGEPW   | \
69
68
                                 ACL_INQUIRE    | \
70
69
                                 ACL_LIST       | \
 
70
                                 ACL_IPROP      | \
71
71
                                 ACL_SETKEY)
72
72
 
73
73
typedef struct _restriction {
95
95
                   krb5_int32,
96
96
                   krb5_principal,
97
97
                   restriction_t **);
 
98
krb5_boolean kadm5int_acl_check_krb
 
99
        (krb5_context,
 
100
                   krb5_const_principal,
 
101
                   krb5_int32,
 
102
                   krb5_const_principal,
 
103
                   restriction_t **);
98
104
krb5_error_code kadm5int_acl_impose_restrictions
99
105
        (krb5_context,
100
106
                   kadm5_principal_ent_rec *,