预定义常量

目录

下列常量由此扩展定义,且仅在此扩展编译入 PHP 或在运行时动态载入时可用。

Constants for Attribute Flags

The functions kadm5_create_principal, kadm5_modify_principal, and kadm5_modify_principal allow to specify special attributes using a bitfield. The symbols are defined below:

constant
KRB5_KDB_DISALLOW_POSTDATED
KRB5_KDB_DISALLOW_FORWARDABLE
KRB5_KDB_DISALLOW_TGT_BASED
KRB5_KDB_DISALLOW_RENEWABLE
KRB5_KDB_DISALLOW_PROXIABLE
KRB5_KDB_DISALLOW_DUP_SKEY
KRB5_KDB_DISALLOW_ALL_TIX
KRB5_KDB_REQUIRES_PRE_AUTH
KRB5_KDB_REQUIRES_HW_AUTH
KRB5_KDB_REQUIRES_PWCHANGE
KRB5_KDB_DISALLOW_SVR
KRB5_KDB_PWCHANGE_SERVER
KRB5_KDB_SUPPORT_DESMD5
KRB5_KDB_NEW_PRINC

Constants for Options

The functions kadm5_create_principal, kadm5_modify_principal, and kadm5_get_principal allow to specify or return principal's options as an associative array. The keys for the associative array are defined as string constants below:

constantfuncdefdescription
KADM5_PRINCIPALlongThe expire time of the princial as a Kerberos timestamp.
KADM5_PRINC_EXPIRE_TIMElongThe expire time of the princial as a Kerberos timestamp.
KADM5_LAST_PW_CHANGElongThe time this principal's password was last changed.
KADM5_PW_EXPIRATIONlongThe expire time of the principal's current password, as a Kerberos timestamp.
KADM5_MAX_LIFElongThe maximum lifetime of any Kerberos ticket issued to this principal.
KADM5_MAX_RLIFElongThe maximum renewable lifetime of any Kerberos ticket issued to or for this principal.
KADM5_MOD_NAMEstringThe name of the Kerberos principal that most recently modified this principal.
KADM5_MOD_TIMElongThe time this principal was last modified, as a Kerberos timestamp.
KADM5_KVNOlongThe version of the principal's current key.
KADM5_POLICYstringThe name of the policy controlling this principal.
KADM5_CLEARPOLICYlongStandard procedure is to assign the 'default' policy to new principals. KADM5_CLEARPOLICY suppresses this behaviour.
KADM5_LAST_SUCCESSlongThe KDC time of the last successfull AS_REQ.
KADM5_LAST_FAILEDlongThe KDC time of the last failed AS_REQ.
KADM5_FAIL_AUTH_COUNTlongThe number of consecutive failed AS_REQs.
KADM5_RANDKEYlongGenerates a random password for the principal. The parameter password will be ignored.
KADM5_ATTRIBUTESlongA bitfield of attributes for use by the KDC.