Just the sanity of KERBEROS list owners and membership acls, just like

we do for members.

diff --git a/clients/blanche/blanche.c b/clients/blanche/blanche.c
index 64782396f4efd2f1566b657b1dafb5272af58d61..e0ce914515d64648d9dcb91f8f1e6082f8c05718 100644 (file)
--- a/clients/blanche/blanche.c
+++ b/clients/blanche/blanche.c
@@ -380,6 +380,13 @@ int main(int argc, char **argv)
            }
          argv[L_MEMACE_TYPE] = typename[memacl->type];
          argv[L_MEMACE_NAME] = memacl->name;
+         if (memacl->type == M_KERBEROS)
+           {
+             status = mrcl_validate_kerberos_member(argv[L_MEMACE_NAME],
+                                                    &argv[L_MEMACE_NAME]);
+             if (mrcl_get_message())
+               mrcl_com_err(whoami);
+           }
        }
       else 
        argv[L_MEMACE_TYPE] = argv[L_MEMACE_NAME] = "NONE";
@@ -403,6 +410,10 @@ int main(int argc, char **argv)
 
            case M_KERBEROS:
              argv[L_ACE_TYPE] = "KERBEROS";
+             status = mrcl_validate_kerberos_member(argv[L_ACE_NAME], 
+                                                    &argv[L_ACE_NAME]);
+             if (mrcl_get_message())
+               mrcl_com_err(whoami);
              status = mr_query("add_list", 13, argv, NULL, NULL);
              break;
            }
@@ -464,6 +475,13 @@ int main(int argc, char **argv)
            }
          argv[L_MEMACE_TYPE + 1] = typename[memacl->type];
          argv[L_MEMACE_NAME + 1] = memacl->name;
+         if (memacl->type == M_KERBEROS)
+           {
+             status = mrcl_validate_kerberos_member(argv[L_MEMACE_NAME + 1],
+                                                    &argv[L_MEMACE_NAME + 1]);
+             if (mrcl_get_message())
+               mrcl_com_err(whoami);
+           }
        }
 
       if (owner)
@@ -485,6 +503,10 @@ int main(int argc, char **argv)
 
            case M_KERBEROS:
              argv[L_ACE_TYPE + 1] = "KERBEROS";
+             status = mrcl_validate_kerberos_member(argv[L_ACE_NAME + 1],
+                                                    &argv[L_ACE_NAME + 1]);
+             if (mrcl_get_message())
+               mrcl_com_err(whoami);
              status = mr_query("update_list", 14, argv, NULL, NULL);
              break;
            }