IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2026-09-03 20:52:56 -05:00
Code Issues Packages Projects Releases Wiki Activity
292 Commits 11 Branches 63 Tags
5dab9feafde6168fc22ac12429c6f214f78d6b22
Commit Graph
75 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Simo Sorce 08855a4d77 Better handling of IPv4/IPv6 sockets in ipa-kpasswd 
Tested with UDP and works
 2007-10-12 13:24:41 -04:00
Simo Sorce d2c73bfd4d Fix make (local-)dist 2007-10-12 12:03:50 -04:00
Simo Sorce beba92bca0 Don't print error on fresh install 2007-10-12 12:03:02 -04:00
Simo Sorce cfac4acf9f Rely more on kerberos. 
Don't read ipa.conf to get the realm, the kerberos libs do that for you.
Use the krbPrincipalName to change passwords
Make it possible to specify the principal at user creation.
Mail is not a required attribute so far, don't require it.
 2007-10-01 17:33:16 -04:00
Simo Sorce 2ef71a85d0 Check passwords are not empty 2007-09-28 14:55:28 -04:00
Simo Sorce 93deded293 IPv6ify, untested 2007-09-28 03:21:17 -04:00
Simo Sorce e16e215cdd Merge with upstream 2007-09-20 17:11:01 -04:00
Simo Sorce fbfefe6b0e Merge conflicts between rob and kevin patches 2007-09-20 16:58:54 -04:00
Simo Sorce 3fd4b9ba2c Initial support for confiuguring a DNS Server during installation. 
It's not perfect yet but good enough to include it.
 2007-09-20 15:10:21 -04:00
Simo Sorce 7633abb9e4 Better we do not fiddle with /etc/hosts, make sure to abort and let the admin 
fix it.
 2007-09-13 12:10:55 -04:00
Simo Sorce 2ca655980b Better way to ask for the Realm name, with implicit default 2007-09-12 18:58:56 -04:00
Simo Sorce 533044903d Add confirmation when asking un-echoed passwords 2007-09-12 13:20:57 -04:00
Simo Sorce fd61df06c5 Avoid showing passwords. 
Patch from William Jon McCann <mccann@jhu.edu>
 2007-09-12 11:55:19 -04:00
Simo Sorce 5898ae527a In the TCP case there is an extra (redundant) lenght 
field before the packet data, address the problem.
 2007-09-12 11:51:16 -04:00
Simo Sorce e7cb308e06 Reference the interactive method by default 2007-09-07 16:38:30 -04:00
Simo Sorce 873bbbd2de Merging with upstream 2007-09-07 14:26:26 -04:00
Simo Sorce 566018f4d4 Better file parsing routines, 
also switch to recreate ldap.conf and krb5.conf from scratch on clients,
avoid nasty failures in case the original files contained strange directives
 2007-09-06 17:57:54 -04:00
Simo Sorce 450e2661d5 Better file parsing routines, 
also switch to recreate ldap.conf and krb5.conf from scratch on clients,
avoid nasty failures in case the original files contained strange directives
 2007-09-06 17:57:54 -04:00
Simo Sorce 584baa7ee2 merge ipa-server/ipaserver/util.py into ipa-python/ipautil.py 
this way freeipa-client does not depend on freeipa-server
 2007-09-04 16:13:15 -04:00
Simo Sorce 48e70a4bf0 Merge with upstream 2007-09-04 15:40:24 -04:00
Simo Sorce abeda55e34 Add password request for admin user 
Set password for admin user using the Directory Mangaer account
and the mozldapldappaswd binary to get and SSL connection
Fix some timeout problems with deploying keytabs
Fix ipa_pwd_extop to actuallt correctly detect an SSL connection
Do not ask for the user to use for the directory unless 'dirsrv' is
 an existing user which may clash, create it silently
 2007-08-31 18:40:01 -04:00
Simo Sorce 7a0629ea55 More DIT fixes discovered after testing 2007-08-31 18:36:54 -04:00
Simo Sorce de96b9a9da Megre in form upstream 2007-08-30 19:42:39 -04:00
Simo Sorce 12b46527c6 Complete autodiscovery with autoconfiguration 
The code is still not perfect and rely on a yet unreleased
nss_ldap package that fix dns discovery problems within nss_ldap
itself.
Also the manipulation of krb5.conf need to be improved
 2007-08-30 19:40:54 -04:00
Simo Sorce a9b9a55392 Fix copy&paste error, its not the conf files we need access to, 
we need to access the generated keytabs
 2007-08-30 15:31:27 -04:00
Simo Sorce a8fe485065 Integrate corrections pointed out on the list 2007-08-30 12:23:39 -04:00
Simo Sorce bebc413366 Finalize DIT, this is waht we are probably going to have in the end, 
or something very close to this one
Add default groups and admin user

TODO: need to discuss more in deep uid/gid generation, this will
      probably change as soon as the DNA plugin is activated
 2007-08-29 18:07:05 -04:00
Simo Sorce 46eeca740e Merge in with upstream 2007-08-28 10:46:03 -04:00
Simo Sorce 4702eb9075 Initial configuration library import 2007-08-28 10:44:43 -04:00
Simo Sorce ac926646ea Fix escaping code, missing "unicode" string identifier in one of the value 
comparisons
 2007-08-21 16:25:02 -04:00
Simo Sorce 48bb474e68 Add interactive prompts to ipa-server-install 
Change unattended flag to be -U
Change master password flag to be -P instead of -m
Improve ipa-client-install readability for user prompts
 2007-08-20 18:40:32 -04:00
Simo Sorce aacfce9cf1 Remove dependncy on libmhash and use openssl md4 functions 
Remove all dependencies on mhash
Remove code optimizatrion from Makefiles, right now these are
developers targeted builds, so it is better to have debugging
symbols around
 2007-08-20 15:38:47 -04:00
Simo Sorce f0ebdce024 Fix copy&paste error, its not the conf files we need access to, 
we need to access the generated keytabs
 2007-08-30 15:31:27 -04:00
Simo Sorce 8c43dde748 Merge from upstream 2007-08-17 13:19:52 -04:00
Simo Sorce 29a8f74fad Complete proper daemonization by closing std* descriptors. 
This fixes install as well as /sbin/services does not hang anymore
 2007-08-17 12:44:01 -04:00
Simo Sorce 9238e3cb4a Merge with upstream 2007-08-17 10:41:45 -04:00
Simo Sorce d41db21a09 Add forgotten ipa-kpasswd.init 2007-08-17 10:34:34 -04:00
Simo Sorce 547f501fae Patch from Rob to quick fix an error in the previous one 2007-08-16 18:59:58 -04:00
Simo Sorce 794ef65abc make pluginlibrary files executable like all other dirsrv plugins 2007-08-16 18:47:29 -04:00
Simo Sorce 0e419aa4bf Add a prototype client tool to configure a client of the IPA server 
Right now it does only discovery (or fallback)
 2007-08-16 18:00:16 -04:00
Simo Sorce 0a6007bcf2 Fix the relative name, Richm explained that the allowed values are either: 
/full/path/plugin-name.so
or just
plugin-name (no .so as different arches have different extensions)
 2007-08-16 17:59:23 -04:00
Simo Sorce f6605ca792 Add libmhash as dependency for ipa_wpd_extop 2007-08-16 17:58:24 -04:00
Simo Sorce 59ada5daeb Make ipa-kpasswd start immediately 2007-08-15 22:17:42 -04:00
Simo Sorce 3d5c8b326b Improve ipa-kpasswd so that it can be installed and started 
Make it daemonize
Make it use syslog (LOG_DAEMON facility)
 2007-08-15 22:15:35 -04:00
Simo Sorce 82f24bb490 General fixes. 
Do not start ipa_kpasswd by default yet
 2007-08-15 21:35:35 -04:00
Simo Sorce 1e59adbe45 in F7 all directory names have changed from fedora-ds to dirsrv 
which should also be the name used in DS 8.0, change all occurences
 2007-08-15 19:45:18 -04:00
Simo Sorce 9faa5ce77e Use relative .so names for plugin so that lib/lib64 does not get in the way 
change the pwd-extop conf ldif to a more sensible name
 2007-08-15 18:55:20 -04:00
Simo Sorce be34ddfc28 Merge from upstream 2007-08-15 18:31:53 -04:00
Simo Sorce 788149e2e5 Activate the passwd extop plugin and ipa-kpasswd daemon 2007-08-15 18:30:15 -04:00
Simo Sorce a8e489e065 Rely on the default path 
Fix description
 2007-08-15 18:29:51 -04:00
Simo Sorce 409318ddc3 Fix dependency and install ipa-kpasswd init script 2007-08-15 18:29:07 -04:00
Simo Sorce 4c1cdddab0 Make it possible to keep the rpmbuild root inside the dev tree. 
Override provided, just set RPMBUILD in your environment.
 2007-08-15 13:09:01 -04:00
Simo Sorce 9ad12ae2eb Clean-up code to avoid Wall warnings 2007-08-15 11:37:03 -04:00
Simo Sorce 6690e4f131 Add deps to README 2007-08-15 11:22:20 -04:00
Simo Sorce c7aed23e82 Clean up code so that Wall returns 0 complaints 2007-08-15 11:21:49 -04:00
Simo Sorce 34b439e838 Fix location of the binary 
Add a comment on the ldap code for the future
 2007-08-09 17:10:41 -04:00
Simo Sorce 5a7c853ec7 export kpasswd keytab during installation process 2007-08-09 16:55:23 -04:00
Simo Sorce d60f233223 typo 2007-08-09 14:58:28 -04:00
Simo Sorce a59c36b394 merge in changes from upstream 2007-08-09 14:52:54 -04:00
Simo Sorce 950bddf2a3 remove unknown patch file 2007-08-09 14:47:52 -04:00
Simo Sorce 588fa2f323 Add dependency and a comment 2007-08-08 22:20:07 -04:00
Simo Sorce 80bd4aa9f9 Fix the bind zone template, or kpasswd will not work 2007-08-08 22:19:37 -04:00
Simo Sorce c13bbdeb7a set preauth on kadmin/changepw otherwise the kpasswd can't acquire a ticket 2007-08-08 22:19:03 -04:00
Simo Sorce a50720e7d4 Make the daemon init it's own tickets. 
Make it blacklist clients until the previous operation is not over.
General bugfixing.
 2007-08-08 22:18:14 -04:00
Simo Sorce 7ca7a4b9e4 move ipa-kpasswd to a new location to conform to the new tree layout 2007-08-01 16:01:52 -04:00
Simo Sorce fbfee82317 Try to fix dir layout and recover missing files 2007-08-01 15:58:52 -04:00
Simo Sorce 96d292b735 Merge from upstream 2007-08-01 15:26:08 -04:00
Simo Sorce adc6632c9a commit before pulling new dir layout 
misc patches to ACLs the example DNS zone and other stuff
misc fixes to the krb instance
current kpasswd code
 2007-08-01 15:06:45 -04:00
Simo Sorce 89c85f06d9 Manage to create a spcific DS user for the ldap instance 
Add uncalled code to load and configure the password extop plugin
 2007-07-02 15:51:04 -04:00
Simo Sorce 2d2471d9f2 Master Key Stash file location used by krb5 related functions 
Need to make the ds user have access to the stash file, best way
is through an ACL.
 2007-07-02 10:23:11 -04:00
Simo Sorce ae29e8f790 Rename krb5pwd to ipapwd to be consistent 2007-07-02 10:14:45 -04:00
Simo Sorce e45c0d3614 Import the multi hash ipa_pwd_extop slapi plugin. 
This plugin should be the central control point for password
change operations.
 2007-06-29 16:21:31 -04:00
Simo Sorce 414c2cccc2 Remove debug statement 2007-06-29 11:30:34 -04:00
Simo Sorce 26feac8e08 First working version 2007-06-29 11:30:10 -04:00
Simo Sorce 820479471e Added krbinstance to configure the kerberos server 
Added/Modified ldif files to add the needed schemas and basic DIT,
SASL configuration and ACLs
Added tenmpate files foir kerberos configuration
Added required packages section to README
Minor mods to dsinstance
Untested!
 2007-06-28 19:09:54 -04:00