{"action":"created","issue":{"url":"https://api.github.com/repos/krb5/krb5/issues/375","labels_url":"https://api.github.com/repos/krb5/krb5/issues/375/labels{/name}","comments_url":"https://api.github.com/repos/krb5/krb5/issues/375/comments","events_url":"https://api.github.com/repos/krb5/krb5/issues/375/events","html_url":"https://github.com/krb5/krb5/pull/375","id":123056200,"number":375,"title":"Kadmin set and extract keys with lockdown","user":{"login":"simo5","id":8332609,"avatar_url":"https://avatars.githubusercontent.com/u/8332609?v=3","gravatar_id":"","url":"https://api.github.com/users/simo5","html_url":"https://github.com/simo5","followers_url":"https://api.github.com/users/simo5/followers","following_url":"https://api.github.com/users/simo5/following{/other_user}","gists_url":"https://api.github.com/users/simo5/gists{/gist_id}","starred_url":"https://api.github.com/users/simo5/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/simo5/subscriptions","organizations_url":"https://api.github.com/users/simo5/orgs","repos_url":"https://api.github.com/users/simo5/repos","events_url":"https://api.github.com/users/simo5/events{/privacy}","received_events_url":"https://api.github.com/users/simo5/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2015-12-19T02:40:17Z","updated_at":"2015-12-20T20:21:18Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/krb5/krb5/pulls/375","html_url":"https://github.com/krb5/krb5/pull/375","diff_url":"https://github.com/krb5/krb5/pull/375.diff","patch_url":"https://github.com/krb5/krb5/pull/375.patch"},"body":"This patchset adds a number of features around key material in kdamin.\r\n1. A new setkey operation that allows to properly store salts.\r\n2. A new get_principal_keys operation protected by a new ACL_EXTRACT acl to retrieve stored keys\r\n3. A new principal attribute named KRB5_KDB_LOCKDOWN_KEYS that loks down keys and prevent\r\nany change or operation that would allow an admin to retrieve keys or set arbitrary keys including delete or renaming of a principal.\r\n\r\nAdditionally some tests have been added/modified to check these operations. "},"comment":{"url":"https://api.github.com/repos/krb5/krb5/issues/comments/166151415","html_url":"https://github.com/krb5/krb5/pull/375#issuecomment-166151415","issue_url":"https://api.github.com/repos/krb5/krb5/issues/375","id":166151415,"user":{"login":"simo5","id":8332609,"avatar_url":"https://avatars.githubusercontent.com/u/8332609?v=3","gravatar_id":"","url":"https://api.github.com/users/simo5","html_url":"https://github.com/simo5","followers_url":"https://api.github.com/users/simo5/followers","following_url":"https://api.github.com/users/simo5/following{/other_user}","gists_url":"https://api.github.com/users/simo5/gists{/gist_id}","starred_url":"https://api.github.com/users/simo5/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/simo5/subscriptions","organizations_url":"https://api.github.com/users/simo5/orgs","repos_url":"https://api.github.com/users/simo5/repos","events_url":"https://api.github.com/users/simo5/events{/privacy}","received_events_url":"https://api.github.com/users/simo5/received_events","type":"User","site_admin":false},"created_at":"2015-12-20T20:21:18Z","updated_at":"2015-12-20T20:21:18Z","body":"Added documentation and tests, pus a fix for the chrand behavior caught by the tests."}}