Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
X-Mailer: MIME-tools 5.427 (Entity 5.427)
From: tlyu@mit.edu
Subject: git commit
RT-Send-CC:
X-RT-Original-Encoding: iso-8859-1
Content-Length: 782


Fix kadmin min_life check with nonexistent policy

In kadmind, self-service key changes require a check against the
policy's min_life field.  If the policy does not exist, this check
should succeed according to the semantics introduced by ticket #7385.
Fix check_min_life() to return 0 if kadm5_get_policy() returns
KADM5_UNK_POLICY.  Reported by John Devitofranceschi.

(back ported from commit 5fca279ca4d18f1b5798847a98e7df8737d2eb7c)

https://github.com/krb5/krb5/commit/736521cfa04cf30ab7a6d57a75b267eed90a6593
Author: Greg Hudson <ghudson@mit.edu>
Committer: Tom Yu <tlyu@mit.edu>
Commit: 736521cfa04cf30ab7a6d57a75b267eed90a6593
Branch: krb5-1.13
 src/kadmin/server/misc.c |    4 +++-
 src/tests/t_policy.py    |    5 ++++-
 2 files changed, 7 insertions(+), 2 deletions(-)