Implement password history in LDAP KDB module The password history is stored in the kerberos LDAP schema attribute 'krbPwdHistory', with one history entry per attribute. When the history is decoded, the history entries are sorted by kvno with the next replacement key set to the end of the list. Based on a patch from Tomas Kuthan. https://github.com/krb5/krb5/commit/b46cce2ea8c0841f7f93db73eefcd180c87a3eae Author: Sarah Day Committer: Greg Hudson Commit: b46cce2ea8c0841f7f93db73eefcd180c87a3eae Branch: master src/lib/kadm5/admin.h | 2 +- src/lib/kadm5/srv/svr_principal.c | 3 + src/plugins/kdb/ldap/libkdb_ldap/ldap_misc.c | 39 ++- src/plugins/kdb/ldap/libkdb_ldap/ldap_principal.c | 46 ++- src/plugins/kdb/ldap/libkdb_ldap/ldap_principal.h | 13 +- src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c | 403 ++++++++++++++++---- src/plugins/kdb/ldap/libkdb_ldap/princ_xdr.c | 10 +- src/plugins/kdb/ldap/libkdb_ldap/princ_xdr.h | 2 +- src/tests/kdbtest.c | 2 +- src/tests/t_kdb.py | 25 ++ 10 files changed, 438 insertions(+), 107 deletions(-)