https://k5wiki.kerberos.org/wiki?action=history&feed=atom&title=Projects%2FReporting-friendly_KDB_dump_format_improvements 2026-04-14T13:50:17Z Revision history for this page on the wiki MediaWiki 1.27.4 https://k5wiki.kerberos.org/wiki?title=Projects/Reporting-friendly_KDB_dump_format_improvements&diff=5548&oldid=prev 2015-09-14T20:08:41Z

<p>New page: {{project-early}} This project includes improvements to <a href="/wiki/Projects/Reporting-friendly_KDB_dump_format" title="Projects/Reporting-friendly KDB dump format">Projects/Reporting-friendly KDB dump format</a>. ==Conceptual tables== ===Principal key history=== This is very similar to the k...</p> <p><b>New page</b></p><div>{{project-early}}<br /> <br /> This project includes improvements to [[Projects/Reporting-friendly KDB dump format]].<br /> <br /> ==Conceptual tables==<br /> <br /> ===Principal key history===<br /> <br /> This is very similar to the keyinfo/keydata table. There is some weird ring buffer stuff that we may or may not want to reflect in the dump.<br /> <br /> * Principal name<br /> * Key index<br /> * Key version number (kvno)<br /> * Enctype<br /> * Salt type<br /> * Salt data as hex string (might be &quot;-1&quot; to denote no salt or normal/default salt)<br /> <br /> ===Password policy===<br /> <br /> * Policy name<br /> * Min password life<br /> * Max password life<br /> * Min password length<br /> * Min password character classes<br /> * Password history length<br /> <br /> ===Lockout policy===<br /> <br /> * Policy name<br /> * Max failures<br /> * Failure count reset interval<br /> * Lockout duration<br /> <br /> ===Ticket policy===<br /> <br /> * Policy name<br /> * Max ticket lifetime<br /> * Max renewable ticket lifetime<br /> <br /> ===Policy boolean attributes===<br /> <br /> As for principal boolean attributes<br /> <br /> ===Policy allowed keysalts===<br /> <br /> (Is this an ordered list?)<br /> <br /> * Policy name<br /> * Enctype<br /> * Salt type<br /> <br /> ==C structure cross reference==<br /> <br /> ===krb5_db_entry===<br /> <br /> ;magic: (not encoded)<br /> ;len:<br /> ;mask: (not encoded?)<br /> ;attributes: princ_flags<br /> ;max_life: princ_tktpolicy<br /> ;max_renewable_life: princ_tktpolicy<br /> ;expiration: princ_tktpolicy<br /> ;pw_expiration: princ_tktpolicy<br /> ;last_success: princ_lockout<br /> ;last_failed: princ_lockout<br /> ;fail_auth_count: princ_lockout<br /> ;n_tl_data: (tl_data)<br /> ;n_key_data: keyinfo/keydata<br /> ;e_length: (implicit)<br /> ;e_data: princ_edata<br /> ;princ: (everywhere)<br /> ;tl_data: (tl_data)<br /> ;key_data: keyinfo/keydata<br /> <br /> ===osa_princ_ent_rec===<br /> <br /> ;version:<br /> ;policy: princ_meta<br /> ;aux_attributes:<br /> ;old_key_len: (implicit in oldkeyinfo/oldkeydata)<br /> ;old_key_next: (implicit in oldkeyinfo/oldkeydata)<br /> ;old_keys: oldkeyinfo/oldkeydata<br /> ;admin_history_kvno: princ_meta<br /> <br /> ==tl_data cross reference==<br /> <br /> ;KRB5_TL_LAST_PWD_CHANGE: princ_meta<br /> ;KRB5_TL_MOD_PRINC: princ_meta<br /> ;KRB5_TL_KADM_DATA: (see osa_princ_ent_rec)<br /> ;KRB5_TL_MKVNO: princ_meta</div>

TomYu