Content-Type: text/plain Content-Disposition: inline Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.427 (Entity 5.427) From: tlyu@mit.edu Subject: git commit X-RT-Original-Encoding: iso-8859-1 Content-Length: 1018 Correctly activate master keys in pre-1.7 KDBs Starting with 1.7, databases are created with actkvno tl-data in the K/M entry which gives the initial master key version an activation time of 0. A database created before 1.7 will not have this tl-data, but we should behave in the same way as we do for a more recent database. Move the actkvno list synthesis code from krb5_dbe_fetch_act_key_list to krb5_dbe_lookup_actkvno so it applies to kdb5_util commands as well as libkadm5. Synthesize the same list as we would have initialized the KDB with, with an activation time of 0 for the earliest master key. (cherry picked from commit ec560fac83912abaa15fb158101c8174497081c5) https://github.com/krb5/krb5/commit/8df3a37ddeae3980ae074903c7c5392f2c522a9d Author: Greg Hudson Committer: Tom Yu Commit: 8df3a37ddeae3980ae074903c7c5392f2c522a9d Branch: krb5-1.10 src/lib/kdb/kdb5.c | 41 +++++++++++++++++++---------------------- 1 files changed, 19 insertions(+), 22 deletions(-)