php-doc-en/reference/kadm5/constants.xml

<?xml version="1.0" encoding="utf-8"?>
<!-- $Revision$ -->
<appendix xml:id="kadm5.constants" xmlns="http://docbook.org/ns/docbook">
 &reftitle.constants;
 &extension.constants;
 <section xml:id="kadm5.constantsAF">
 <title>Constants for Attribute Flags</title>
  <para>
   The functions <function>kadm5_create_principal</function>,
   <function>kadm5_modify_principal</function>, and
   <function>kadm5_modify_principal</function> allow to specify
   special attributes using a bitfield. The symbols are defined below:
   <table>
    <title>Attributes for use by the KDC</title>
    <tgroup cols="1">
     <thead>
      <row>
       <entry>constant</entry>
      </row>
     </thead>
     <tbody>
      <row>
       <entry>KRB5_KDB_DISALLOW_POSTDATED</entry>
      </row>
      <row>
       <entry>KRB5_KDB_DISALLOW_FORWARDABLE</entry>
      </row>
      <row>
       <entry>KRB5_KDB_DISALLOW_TGT_BASED</entry>
      </row>
      <row>
       <entry>KRB5_KDB_DISALLOW_RENEWABLE</entry>
      </row>
      <row>
       <entry>KRB5_KDB_DISALLOW_PROXIABLE</entry>
      </row>
      <row>
       <entry>KRB5_KDB_DISALLOW_DUP_SKEY</entry>
      </row>
      <row>
       <entry>KRB5_KDB_DISALLOW_ALL_TIX</entry>
      </row>
      <row>
       <entry>KRB5_KDB_REQUIRES_PRE_AUTH</entry>
      </row>
      <row>
       <entry>KRB5_KDB_REQUIRES_HW_AUTH</entry>
      </row>
      <row>
       <entry>KRB5_KDB_REQUIRES_PWCHANGE</entry>
      </row>
      <row>
       <entry>KRB5_KDB_DISALLOW_SVR</entry>
      </row>
      <row>
       <entry>KRB5_KDB_PWCHANGE_SERVER</entry>
      </row>
      <row>
       <entry>KRB5_KDB_SUPPORT_DESMD5</entry>
      </row>
      <row>
       <entry>KRB5_KDB_NEW_PRINC</entry>
      </row>
     </tbody>
    </tgroup>
   </table>
  </para>
 </section>

 <section xml:id="pecl.kadm5.constantsOP">
 <title>Constants for Options</title>
  <para>
   The functions <function>kadm5_create_principal</function>,
   <function>kadm5_modify_principal</function>, and
   <function>kadm5_get_principal</function> allow to specify or return
   principal's options as an associative array. The keys for the associative
   array are defined as string constants below:
   <table>
    <title>Options for creating/modifying/retrieving principals</title>
    <tgroup cols="2">
     <thead>
      <row>
       <entry>constant</entry>
       <entry>funcdef</entry>
       <entry>description</entry>
      </row>
     </thead>
     <tbody>
      <row>
       <entry>KADM5_PRINCIPAL</entry>
       <entry>long</entry>
       <entry>The expire time of the princial as a Kerberos timestamp.</entry>
      </row>
      <row>
       <entry>KADM5_PRINC_EXPIRE_TIME</entry>
       <entry>long</entry>
       <entry>The expire time of the princial as a Kerberos timestamp.</entry>
      </row>
      <row>
       <entry>KADM5_LAST_PW_CHANGE</entry>
       <entry>long</entry>
       <entry>The time this principal's password was last changed.</entry>
      </row>
      <row>
       <entry>KADM5_PW_EXPIRATION</entry>
       <entry>long</entry>
       <entry>
        The expire time of the principal's current password, as a Kerberos
        timestamp.
       </entry>
      </row>
      <row>
       <entry>KADM5_MAX_LIFE</entry>
       <entry>long</entry>
       <entry>
        The maximum lifetime of any Kerberos ticket issued to this principal.
       </entry>
      </row>
      <row>
       <entry>KADM5_MAX_RLIFE</entry>
       <entry>long</entry>
       <entry>
        The maximum renewable lifetime of any Kerberos ticket issued to or
        for this principal.
       </entry>
      </row>
      <row>
       <entry>KADM5_MOD_NAME</entry>
       <entry>string</entry>
       <entry>
        The name of the Kerberos principal that most recently modified this
        principal.
       </entry>
      </row>
      <row>
       <entry>KADM5_MOD_TIME</entry>
       <entry>long</entry>
       <entry>
        The time this principal was last modified, as a Kerberos timestamp.
       </entry>
      </row>
      <row>
       <entry>KADM5_KVNO</entry>
       <entry>long</entry>
       <entry>The version of the principal's current key.</entry>
      </row>
      <row>
       <entry>KADM5_POLICY</entry>
       <entry>string</entry>
       <entry>The name of the policy controlling this principal.</entry>
      </row>
      <row>
       <entry>KADM5_CLEARPOLICY</entry>
       <entry>long</entry>
       <entry>
        Standard procedure is to assign the 'default' policy to new
        principals. KADM5_CLEARPOLICY suppresses this behaviour.
       </entry>
      </row>
      <row>
       <entry>KADM5_LAST_SUCCESS</entry>
       <entry>long</entry>
       <entry>The KDC time of the last successfull AS_REQ.</entry>
      </row>
      <row>
       <entry>KADM5_LAST_FAILED</entry>
       <entry>long</entry>
       <entry>The KDC time of the last failed AS_REQ.</entry>
      </row>
      <row>
       <entry>KADM5_FAIL_AUTH_COUNT</entry>
       <entry>long</entry>
       <entry>The number of consecutive failed AS_REQs.</entry>
      </row>
      <row>
       <entry>KADM5_RANDKEY</entry>
       <entry>long</entry>
       <entry>
        Generates a random password for the principal. The parameter
        <parameter>password</parameter> will be ignored.
       </entry>
      </row>
      <row>
       <entry>KADM5_ATTRIBUTES</entry>
       <entry>long</entry>
       <entry>A bitfield of attributes for use by the KDC.</entry>
      </row>
     </tbody>
    </tgroup>
   </table>
  </para>
 </section>
</appendix>

<!-- Keep this comment at the end of the file
Local variables:
mode: sgml
sgml-omittag:t
sgml-shorttag:t
sgml-minimize-attributes:nil
sgml-always-quote-attributes:t
sgml-indent-step:1
sgml-indent-data:t
indent-tabs-mode:nil
sgml-parent-document:nil
sgml-default-dtd-file:"~/.phpdoc/manual.ced"
sgml-exposed-tags:nil
sgml-local-catalogs:nil
sgml-local-ecat-files:nil
End:
vim600: syn=xml fen fdm=syntax fdl=2 si
vim: et tw=78 syn=sgml
vi: ts=1 sw=1
-->