OpenAFS CVS Commit: openafs/src/viced by shadow

[cvs@GRAND.CENTRAL.ORG]

Update of /cvs/openafs/src/viced
In directory GRAND.CENTRAL.ORG:/data/sb/openafs-stable-1_4_x/src/viced

Modified Files:
      Tag: openafs-stable-1_4_x
	host.c viced.c 
Log Message:
DELTA STABLE14-multiple-local-realms-20051208
AUTHOR jaltman@secure-endpoints.com

This patch extends the krb.conf file allowing the specification of
multiple realms which should be treated as equivalents to the local
cell authentication domain.  Additional realms are specified on the
first line of the krb.conf file and are separated by white space.

In addition, the patch adds a new file stored in the same directory
as the krb.conf file called krb.excl.  This file contains a list of
principal names, one per line, that must not be treated as local
identities.

The purpose of this patch is to allow organizations that are supporting
multiple realms with synchronized user principal databases to allow
their users to login with any of the realms and treat the principal
names as equivalent to the local PTS identity.   The exclusion is
to allow certain names, such as those for administrative IDs, to be
restricted to a subset of the realms.

Further optimization of the afs_krb_exclusion() should be performed to
remove the need to re-read the file.  This patch should be considered
a temporary solution until a more permanent set of extensions to the
PT database and RPCs allow for the assignment of mechanism specific
aliases for PT IDs.


--- DELTA config for openafs-stable-1_4_x follows ---
STABLE14-multiple-local-realms-20051208 openafs/src/viced/host.c 1.57.2.63 1.57.2.64
STABLE14-multiple-local-realms-20051208 openafs/src/viced/viced.c 1.58.2.32 1.58.2.33