next up previous contents
Next: Configuration parameters Up: Data Structures Previous: Principals, kadm5_principal_ent_t   Contents


Policies, kadm5_policy_ent_t

If the POLICY bit is set in aux_attributes, the #1 name field in the kadm5_principal_ent_t structure refers to a password policy entry defined in a #1.

typedef struct _kadm5_policy_ent_t {
        char *policy;

        u_int32 pw_min_life;
        u_int32 pw_max_life;
        u_int32 pw_min_length;
        u_int32 pw_min_classes;
        u_int32 pw_history_num;
        u_int32 policy_refcnt;
} kadm5_policy_ent_rec, *kadm5_policy_ent_t;

The fields of an kadm5_policy_ent_t are interpreted as follows. Note that a policy's values only apply to a principal using that policy.

policy
The name of this policy, as a NULL-terminated string. The ASCII characters between 32 (space) and 126 (tilde), inclusive, are legal.

pw_min_life
The minimum password lifetime, in seconds. A principal cannot change its password before pw_min_life seconds have passed since last_pwd_change.

pw_max_life
The default duration, in seconds, used to compute pw_expiration when a principal's password is changed.

pw_min_length
The minimum password length, in characters. A principal cannot set its password to anything with fewer than this number of characters. This value must be greater than zero.

pw_min_classes
The minimum number of character classes in the password. This value can only be 1, 2, 3, 4, or 5. A principal cannot set its password to anything with fewer than this number of character classes in it.

pw_history_num
The number of past passwords that are stored for the principal; the minimum value is 1 and the maximum value is 10. A principal cannot set its password to any of its previous pw_history_num passwords. The first ``previous'' password is the current password; thus, a principal with a policy can never reset its password to its current value.

policy_refcnt
The number of principals currently using this policy. A policy cannot be deleted unless this number is zero.


next up previous contents
Next: Configuration parameters Up: Data Structures Previous: Principals, kadm5_principal_ent_t   Contents
Autobuild 2009-09-05