[Freeipa-devel] [PATCH 0085] Limit pwpolicy maxlife to 20000 days

Martin Kosek mkosek at redhat.com
Mon Aug 5 15:53:19 UTC 2013


On 08/05/2013 02:45 PM, Tomas Babej wrote:
> Hi,
> 
> Since krbMaxPwdLife attribute is represented as number of seconds,
> setting maxlife to high values such as 999 999 days (~2739 years)
> would result to overflow when parsing this attribute in kdb plugin,
> and hence default maxlife of 90 days would be applied.
> 
> Limit the maximum value of maxlife that can be set through the
> framework to 20 000 days (~ 54 years).
> 
> https://fedorahosted.org/freeipa/ticket/3817
> 
> Tomas

ACK. Pushed to master.

Martin




More information about the Freeipa-devel mailing list