[Freeipa-devel] [PATCH] 0001 ipa_kdb add krbPrincipalAuthInd handling

[Nathaniel McCallum]

On Mon, 2016-04-11 at 10:41 -0400, Matt Rogers wrote:
> Hi,
> 
> The attached patch is a part of the authentication indicator
> enhancements,
> adding indicator value storage and retrieval for the KDB driver.
> 
> https://fedorahosted.org/freeipa/ticket/5782

This patch is part of the authentication indicators work and is
parallel to my patches (also on this list). My patches cause the
OTP/RADIUS process to insert indicators in tickets. This patch allows
us to define required indicators for a service principal. After this
patch is merged, we will need CLI and UI to expose the manipulation of
this attribute.

A similar patch was already merged upstream. This patch matches the
behavior and schema of upstream in our own KDB module with one
exception: we do not store indicators in krbExtraData in parallel.