Next: Configuration parameters
Up: Data Structures
Previous: Principals, kadm5_principal_ent_t
Contents
Policies, kadm5_policy_ent_t
If the POLICY bit is set in aux_attributes, the #1
name field
in the kadm5_principal_ent_t structure refers to a password policy
entry defined in a #1
.
typedef struct _kadm5_policy_ent_t {
char *policy;
u_int32 pw_min_life;
u_int32 pw_max_life;
u_int32 pw_min_length;
u_int32 pw_min_classes;
u_int32 pw_history_num;
u_int32 policy_refcnt;
} kadm5_policy_ent_rec, *kadm5_policy_ent_t;
The fields of an kadm5_policy_ent_t are interpreted as follows.
Note that a policy's values only apply to a principal using that
policy.
- policy
- The name of this policy, as a NULL-terminated string.
The ASCII characters between 32 (space) and 126 (tilde), inclusive,
are legal.
- pw_min_life
- The minimum password lifetime, in seconds.
A principal cannot change its password before pw_min_life seconds have
passed since last_pwd_change.
- pw_max_life
- The default duration, in seconds, used to compute
pw_expiration when a principal's password is changed.
- pw_min_length
- The minimum password length, in characters. A
principal cannot set its password to anything with fewer than this
number of characters. This value must be greater than zero.
- pw_min_classes
- The minimum number of character classes in the
password. This value can only be 1, 2, 3, 4, or 5. A principal cannot
set its password to anything with fewer than this number of character
classes in it.
- pw_history_num
- The number of past passwords that are
stored for the principal; the minimum value is 1 and the maximum value
is 10. A principal cannot set its password to any of its previous
pw_history_num passwords. The first ``previous'' password is the
current password; thus, a principal with a policy can never reset its
password to its current value.
- policy_refcnt
- The number of principals currently using this policy.
A policy cannot be deleted unless this number is zero.
Next: Configuration parameters
Up: Data Structures
Previous: Principals, kadm5_principal_ent_t
Contents
Autobuild
2009-09-05