s4:kdc/db-glue: preferr the previous password for trust accounts
authorStefan Metzmacher <metze@samba.org>
Wed, 1 Jul 2015 03:33:10 +0000 (05:33 +0200)
committerStefan Metzmacher <metze@samba.org>
Wed, 8 Jul 2015 16:38:20 +0000 (18:38 +0200)
commit3943f02691d167cf092a19a10c5bdf4302ab33c3
tree60dca8f53178e76a7583b66685ce96d42daa332e
parentf05c0bc6397d783681fb0b4a82677493e96f3398
s4:kdc/db-glue: preferr the previous password for trust accounts

If no kvno is specified we should return the keys with the lowest value.

For the initial value this means we return the current key with kvno 0 (NULL on
the wire). Later we return the previous key with kvno current - 1.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
source4/kdc/db-glue.c