Re: kadmin acl file, and kpasswd cracklib..

[joda@pdc.kth.se (Johan Danielsson)]

Troy Benjegerdes <hozer@drgw.net> writes:

> b) patches for Heimdal kadmind to support something like the following
>    in kadmind.acl:
> 
> 
> */admin		all	*@FOO.COM

You can't have wildcarded admins now, but it should be simple to do:

--- acl.c	2001/08/24 04:01:42	1.13
+++ acl.c	2002/06/11 10:25:09
@@ -103,7 +103,7 @@
 	ret = krb5_parse_name(context->context, p, &this_princ);
 	if(ret)
 	    break;
-	if(!krb5_principal_compare(context->context, 
+	if(!krb5_principal_match(context->context, 
 				   context->caller, this_princ)) {
 	    krb5_free_principal(context->context, this_princ);
 	    continue;

Haven't tested, and haven't thought about any consequences.

/Johan