Simo Sorce
c3dc08b93f
ipa-kdb: fix memleaks in ipa_kdb_mspac.c
2011-12-02 09:49:30 -05:00
Simo Sorce
64dfa1b37e
ipa-kdb: Remove unused CFLAGS/LIBS from Makefiles
2011-12-02 09:49:30 -05:00
Simo Sorce
e727dc50cc
ipa-kdb: fix free() of uninitialized var
2011-11-29 16:08:59 -05:00
Simo Sorce
ba2e357ba2
ipa-kdb: Support re-signing PAC with different checksum
...
Fixes: https://fedorahosted.org/freeipa/ticket/2122
2011-11-29 09:28:25 -05:00
Simo Sorce
94a8bc1917
MS-PAC: Add support for verifying PAC in TGS requests
...
Fake code for now, to be rebased later
2011-11-07 14:25:07 -05:00
Simo Sorce
18537d55a7
Add support for generating PAC for AS requests for user principals
2011-11-07 14:25:07 -05:00
Simo Sorce
9701821227
Fix CID 11027: Wrong sizeof argument
...
https://fedorahosted.org/freeipa/ticket/2037
2011-11-07 11:13:55 -05:00
Simo Sorce
ad8c53d584
Fix CID 11026: Resource leak
...
https://fedorahosted.org/freeipa/ticket/2037
2011-11-07 11:13:55 -05:00
Simo Sorce
8cc402206a
Fix CID 11025: Resource leak
...
https://fedorahosted.org/freeipa/ticket/2037
2011-11-07 11:13:55 -05:00
Simo Sorce
ea10ad1851
Fix CID 11024: Resource leak
...
https://fedorahosted.org/freeipa/ticket/2037
2011-11-07 11:13:55 -05:00
Simo Sorce
bc3fb1b3a0
Fix CID 11023: Resource leak
...
https://fedorahosted.org/freeipa/ticket/2037
2011-11-07 11:13:55 -05:00
Simo Sorce
a49cf51ee2
Fix CID 11022: Resource leak
...
https://fedorahosted.org/freeipa/ticket/2037
2011-11-07 11:13:55 -05:00
Simo Sorce
c286278aa9
Fix CID 11020: Resource leak
...
https://fedorahosted.org/freeipa/ticket/2037
2011-11-07 11:13:55 -05:00
Simo Sorce
299c91df92
Fix CID 11019: Resource leak
...
https://fedorahosted.org/freeipa/ticket/2037
2011-11-07 11:13:55 -05:00
Simo Sorce
9f07404fe3
ipa-kdb: Fix memory leak
2011-11-03 09:51:30 -04:00
Simo Sorce
f28ab8351f
ipa-kdb: Fix legacy password hashes generation
...
We were not searching for objectclass so the test to se if a user had the
posixAccount attribute was failing and the user was not marked as ipa_user.
This in turn caused us to not synchronize legacy hashes by not trying to store
the userPassword attribute.
Fixes: https://fedorahosted.org/freeipa/ticket/1820
2011-10-06 12:15:05 -04:00
Simo Sorce
dfc704de25
ipa-kdb: Fix expiration time calculation
...
Expiration time should be enforced as per policy only for users and only when a
password change occurs, ina ll other cases we should just let kadmin decide
whther it is going to set a password expiration time or just leave it empty.
In general service tickts have strong random passwords so they do not need a
password policy or expiration at all.
https://fedorahosted.org/freeipa/ticket/1839
2011-09-26 10:07:11 +02:00
Simo Sorce
4167ad01d7
ipa-kdb: Properly set password expiration time.
...
We do the policy check so we are the only one that can calculate the new
pwd espiration time.
Fixes: https://fedorahosted.org/freeipa/ticket/1793
2011-09-19 12:28:35 -04:00
Simo Sorce
d8de2d1b7b
ipa-kdb: Be flexible
...
Although the proper values for booleans from LDAP should be only uppercase,
389ds does allow wrong cased values without complaining. And we still have some
places where the wrong case is used.
Avoid getting frustrating errors when reading these values out.
2011-08-26 08:24:50 -04:00
Simo Sorce
0d048d7b49
ipa-kdb: add password policy support
...
Use default policy for new principals created by kadmin
2011-08-26 08:24:50 -04:00
Simo Sorce
452fcdccdc
ipa-kdb: implement change_pwd function
2011-08-26 08:24:49 -04:00
Simo Sorce
49c25dbdf5
ipa-kdb: implement function to retrieve password policies
2011-08-26 08:24:49 -04:00
Simo Sorce
0a4f7960b9
ipa-kdb: Get/Store Master Key directly from LDAP
2011-08-26 08:24:49 -04:00
Simo Sorce
e9e426354f
ipa-kdb: add functions to change principals
2011-08-26 08:24:49 -04:00
Simo Sorce
d25370a579
ipa-kdb: add function to iterate over principals
2011-08-26 08:24:49 -04:00
Simo Sorce
2f8caeab48
ipa-kdb: add functions to delete principals
2011-08-26 08:24:49 -04:00
Simo Sorce
8d5c67a9f8
ipa-kdb: add function to free principals
2011-08-26 08:24:49 -04:00
Simo Sorce
abd424889b
ipa-kdb: functions to get principal
2011-08-26 08:24:49 -04:00
Simo Sorce
46c803a08d
ipa-kdb: add common utility ldap wrapper functions
2011-08-26 08:24:49 -04:00
Simo Sorce
b5ba0f7f48
ipa-kdb: implement get_time function
2011-08-26 08:24:49 -04:00
Simo Sorce
6e010fedaa
ipa-kdb: initialize module functions
...
Initialize module also on ipadb_create invocation. This is what
kdb5_util expects.
2011-08-26 08:24:49 -04:00
Simo Sorce
579a159915
ipa-kdb: add exports file
...
limit exported symbols only to the ones actually needed by krb5kdc
2011-08-26 08:24:49 -04:00
Simo Sorce
bac6f2dd13
ipa-kdb: Initial plugin skeleton
2011-08-26 08:24:49 -04:00
