krb5 commit: Don't dump policies if principals are specified

Greg Hudson <[email protected]>
Newsgroups gmane.comp.encryption.kerberos.cvs
Message-ID <[email protected]>
https://github.com/krb5/krb5/commit/911d592a85cb5d4e793c83cf702178d14ac21e6d
commit 911d592a85cb5d4e793c83cf702178d14ac21e6d
Author: Greg Hudson <[email protected]>
Date:   Mon Oct 15 18:32:31 2018 -0400

    Don't dump policies if principals are specified
    
    If kdb5_util dump is asked to filter for specific principals, do not
    dump the policy database.
    
    ticket: 8752 (new)

 src/kadmin/dbutil/dump.c |    3 ++-
 1 files changed, 2 insertions(+), 1 deletions(-)

diff --git a/src/kadmin/dbutil/dump.c b/src/kadmin/dbutil/dump.c
index c792afd..86e046c 100644
--- a/src/kadmin/dbutil/dump.c
+++ b/src/kadmin/dbutil/dump.c
@@ -1453,7 +1453,8 @@ dump_db(int argc, char **argv)
         goto error;
     }
 
-    if (dump->dump_policy != NULL) {
+    /* Don't dump policies if specific principal entries were requested. */
+    if (dump->dump_policy != NULL && args.nnames == 0) {
         ret = krb5_db_iter_policy(util_context, "*", dump->dump_policy, &args);
         if (ret) {
             com_err(progname, ret, _("performing %s dump"), dump->name);
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.