From bjaspan@MIT.EDU  Tue Oct  8 17:53:35 1996
Received: from MIT.EDU (SOUTH-STATION-ANNEX.MIT.EDU [18.72.1.2]) by rt-11.MIT.EDU (8.7.5/8.7.3) with SMTP id RAA17830 for <bugs@RT-11.MIT.EDU>; Tue, 8 Oct 1996 17:53:35 -0400
Received: from DUN-DUN-NOODLES.MIT.EDU by MIT.EDU with SMTP
	id AA25046; Tue, 8 Oct 96 17:53:29 EDT
Received: by DUN-DUN-NOODLES.MIT.EDU (5.x/4.7) id AA00703; Tue, 8 Oct 1996 17:53:20 -0400
Message-Id: <9610082153.AA00703@DUN-DUN-NOODLES.MIT.EDU>
Date: Tue, 8 Oct 1996 17:53:20 -0400
From: bjaspan@MIT.EDU
Reply-To: bjaspan@MIT.EDU
To: krb5-bugs@MIT.EDU
Subject: modify_principal pw_expire semantics wrong
X-Send-Pr-Version: 3.99

>Number:         87
>Category:       krb5-admin
>Synopsis:       modify_principal pw_expire semantics wrong
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    bjaspan
>State:          closed
>Class:          sw-bug
>Submitter-Id:   unknown
>Arrival-Date:   Tue Oct e 17:54:01 EDT 1996
>Last-Modified:  Thu Oct e 16:28:23 EDT 1996
>Originator:     Barry Jaspan
>Organization:
mit
>Release:        1.0-development
>Environment:
	
System: SunOS DUN-DUN-NOODLES 5.4 Generic_101945-37 sun4m sparc


>Description:

The semantics for setting password expiration as specified in
doc/kadm5/api-funcspec.tex are totally nonsensical.  As a result, the
behavior of kadm5_modify_principal is nonsensical, although different
from that in the spec.  In particular, if there is no policy,
modify_principal does not allow a principal's pw_expiration to be set
to anything greater than its current value; this makes absolutely no
sense.


>How-To-Repeat:
	
>Fix:
	
>Audit-Trail:

From: "Barry Jaspan" <bjaspan@MIT.EDU>
To: bjaspan@MIT.EDU
Cc: krb5-bugs@MIT.EDU
Subject: Re: krb5-admin/87: modify_principal pw_expire semantics wrong
Date: Wed, 16 Oct 1996 17:59:59 -0400

 I have updated kadm5/api-funcspec.tex to define new pw_expire
 semantics to create_principal and modify_principal.  I have updated
 kadm5/api-unit-test.tex and the unit tests to test the new
 create_principal behavior, but not yet the new modify_principal
 behavior.

State-Changed-From-To: open-closed
State-Changed-By: bjaspan
State-Changed-When: Thu Oct 17 16:27:40 1996
State-Changed-Why:

Files:

doc/kadm5/api-funcspec.tex
doc/kadm5/api-unit-test.tex
lib/kadm5/ChangeLog
lib/kadm5/unit-test/ChangeLog

>Unformatted: