IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2026-09-03 20:52:56 -05:00
Code Issues Packages Projects Releases Wiki Activity
5,375 Commits 11 Branches 63 Tags
ea4f60b15a2743eb61f27ccd33d7bed17552eade
Commit Graph
82 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Sumit Bose 70d7ec587a ipadb: reload trust information if domain is not known 
Currently the data about trusted domains is read once at startup. If a
new trust is added the KDC must be restarted to know about the new
trust. This patch reloads the trust data if there is a request from an
unknown domain. To make DOS attacks a bit harder the data can be updated
only once in a minute.

Fixes https://fedorahosted.org/freeipa/ticket/3156
 2012-10-09 10:28:11 +02:00
Sumit Bose 12f4584f57 ipa-adtrust-install: create fallback group with ldif file 
Currently the framework is used to add the group but we want to avoid
that users are added explicitly to the group by removing the
objectclasses groupofnames, ipausergroup and nestedgroup and we want to
use a name with spaces in it. Both it not easy possible with the
framework, a LDIF file is used instead to create the group.

Fixes https://fedorahosted.org/freeipa/ticket/3147
 2012-10-09 10:22:16 +02:00
Sumit Bose 0575e68013 ipasam: generate proper SID for trusted domain object 2012-10-04 22:15:36 -04:00
Sumit Bose e713b8dba2 Add new ipaIDobject to DNA plugin configuraton 2012-10-04 22:15:36 -04:00
Sumit Bose 2eee4ce83d ipa-adtrust-install: print list of needed SRV records 
If --no-msdcs is given on the command line all needed SRV records will
be printed.

Fixes https://fedorahosted.org/freeipa/ticket/3019
 2012-10-04 22:15:36 -04:00
Sumit Bose 0d82862066 Avoid ldapmodify error messages during ipa-adtrust-install 
Fixes https://fedorahosted.org/freeipa/ticket/3012
 2012-10-04 22:15:36 -04:00
Sumit Bose 58a99dd5ac Add SIDs for existing users and groups at the end of ipa-adtrust-install 
Fixes https://fedorahosted.org/freeipa/ticket/3104
 2012-10-04 22:15:36 -04:00
Sumit Bose f5e839ef21 ipasam: add fallback primary group 
https://fedorahosted.org/freeipa/ticket/2955
 2012-10-04 22:15:36 -04:00
Sumit Bose 503e03bf96 ipa-adtrust-install: replace print with self.print_msg 
https://fedorahosted.org/freeipa/ticket/3019
 2012-10-04 22:15:28 -04:00
Sumit Bose fdd3299fa8 ipa-adtrust-install: Add fallback group 
https://fedorahosted.org/freeipa/ticket/2955
 2012-10-04 22:15:26 -04:00
Sumit Bose a72064c377 ipa-adtrust-install: remove wrong check for dm_password 
Additionally this patch removes a comment which makes no sense at this
place anymore.

Fixes https://fedorahosted.org/freeipa/ticket/3023
 2012-10-04 13:05:48 +02:00
Sumit Bose bdf5f464d7 Add --rid-base and --secondary-rid-base to ipa-adtrust-install man page 
Fixes https://fedorahosted.org/freeipa/ticket/3038
 2012-10-03 10:14:00 +02:00
Sumit Bose e15a1c627d Enhance description of --no-msdcs in man page 
Fixes https://fedorahosted.org/freeipa/ticket/2972
 2012-10-03 10:14:00 +02:00
Sumit Bose 029300db79 Add man page paragraph about running ipa-adtrust-install multiple times 
Fixes https://fedorahosted.org/freeipa/ticket/2967
 2012-10-03 10:14:00 +02:00
Sumit Bose d0f672c131 Update krb5.conf during ipa-adtrust-install 
https://fedorahosted.org/freeipa/ticket/2515
 2012-09-19 20:47:31 -04:00
Sumit Bose 0d31833317 Set master_kdc and dns_lookup_kdc to true 
https://fedorahosted.org/freeipa/ticket/2515
 2012-09-19 20:47:12 -04:00
Sumit Bose d491ba0289 ipasam: Fixes build with samba4 rc1 2012-09-14 16:50:52 +02:00
Sumit Bose f33adf22f8 Trust CLI: mark trust-mod for future use 
Fixes: https://fedorahosted.org/freeipa/ticket/2968
 2012-09-07 16:50:35 +02:00
Sumit Bose d4ba746003 Trust CLI: return more details of added trust 
Fixes: https://fedorahosted.org/freeipa/ticket/2971
 2012-09-07 16:50:35 +02:00
Sumit Bose 94ce8ecb9c Trust CLI: Return more details when searching trusts 
Fixes https://fedorahosted.org/freeipa/ticket/2970
 2012-09-07 16:50:35 +02:00
Sumit Bose e23acda5b8 Do not create trust if murmur hash is not available and base-id not given 
Fixes https://fedorahosted.org/freeipa/ticket/3018
 2012-09-07 16:50:35 +02:00
Sumit Bose fe083fd5bf IDRange CLI: Add documentation 
Fixes https://fedorahosted.org/freeipa/ticket/2969
 2012-09-07 16:50:35 +02:00
Sumit Bose 67b47a65f2 IDRange CLI: allow to work without arguments 
Fixes https://fedorahosted.org/freeipa/ticket/2999
 2012-09-07 16:50:35 +02:00
Sumit Bose 377e1267b7 Rename range CLI to idrange 2012-09-07 16:50:35 +02:00
Sumit Bose bd7f3e4b17 ipasam: replace trim_char() with trim_string() 2012-09-06 09:24:59 +02:00
Sumit Bose 931e890680 ipasam: remove fetch_ldap_pw() 2012-09-06 09:24:59 +02:00
Sumit Bose 260940ceb4 ipasam: replace get_global_sam_sid() 2012-09-06 09:24:59 +02:00
Sumit Bose 621b28a4a0 ipasam: add libsss_idmap context and replace string_to_sid() 2012-09-06 09:24:59 +02:00
Sumit Bose dbd4cb51d3 ipasam: Replace global_sid_Builtin 2012-09-06 09:24:59 +02:00
Sumit Bose af02b9e0a9 ipasam: Replace sid_peek_check_rid() 2012-09-06 09:24:59 +02:00
Sumit Bose fa7f5a8327 ipasam: Replace sid_check_is_our_sam() 2012-09-06 09:24:59 +02:00
Sumit Bose 8697b70d6b ipasam: Replace dom_sid_compare_domain() 2012-09-06 09:24:59 +02:00
Sumit Bose f864d766eb ipasam: Replace is_null_sid() 2012-09-06 09:24:59 +02:00
Sumit Bose 4f7af98571 ipasam: replace sid_compose() 2012-09-06 09:24:58 +02:00
Sumit Bose 454c2d4e8c ipasam: replace sid_copy() 2012-09-06 09:24:58 +02:00
Sumit Bose 885f4a6bb8 ipasam: remove talloc_asprintf_strupper_m() 2012-09-06 09:24:58 +02:00
Sumit Bose 2877cb4c0d ipasam: remove strlower_m() 2012-09-06 09:24:58 +02:00
Sumit Bose 33494689a2 ipasam: replace strnequal() 2012-09-06 09:24:58 +02:00
Sumit Bose 128257c68b ipasam: remove sid_peek_rid() 2012-09-06 09:24:58 +02:00
Sumit Bose 50a0b84176 ipasam: remove nt_lm_owf_gen() and dependency to libcliauth.so 2012-09-06 09:24:58 +02:00
Sumit Bose 973aad9db3 Make encode_ntlm_keys() public 2012-09-06 09:24:58 +02:00
Sumit Bose d90fb0a590 ipasam: cleanup explicit dependencies to samba libs 2012-09-06 09:24:58 +02:00
Sumit Bose 83245bc8c9 ipadb_iterate(): handle match_entry == NULL 
If match_entry == NULL all principals should be iterated.

Additionally this patch adds a check in ipadb_filter_escape() to make
sure that the input is not NULL.

Fixes: https://fedorahosted.org/freeipa/ticket/3011
 2012-09-05 14:20:29 +02:00
Sumit Bose e8d4cc65f8 Use libsamba-security instead of libsecurity 
In samba4-beta6 the name of a library was changed from libsecurity to
libsamba-security.
 2012-08-22 17:18:07 +03:00
Sumit Bose 59df038f87 trust CLI: add ID range for new trusted domain 2012-08-15 23:41:17 -04:00
Sumit Bose d815c3bc99 extdom: read ranges from LDAP 2012-08-15 23:41:06 -04:00
Sumit Bose 0ffb2022fe Fix typo 
Signed-off-by: Simo Sorce <ssorce@redhat.com>
 2012-07-09 08:36:05 -04:00
Sumit Bose 76d809574b ipasam: replace testing code 2012-07-06 13:06:16 +03:00
Sumit Bose abe40284cf ipasam: fixes for clang warnings 2012-07-06 13:06:16 +03:00
Sumit Bose 7fb9ca23a1 Allow silent build if available 2012-07-06 13:06:15 +03:00
Sumit Bose 06b298e93a Use DN objects instead of strings in adtrustinstance 2012-07-01 17:41:57 -04:00
Sumit Bose bdb995194c Add range check preop plugin 
To make sure that ID ranges do not overlap this plugin checks new
additions and changes for conflicts with existing ranges.

https://fedorahosted.org/freeipa/ticket/2185
 2012-06-29 18:00:58 -04:00
Sumit Bose fbebe82811 Add CLI for ID ranges 
https://fedorahosted.org/freeipa/ticket/2185
 2012-06-29 18:00:50 -04:00
Sumit Bose e809802aed Set RID bases for local domain during ipa-adtrust-install 2012-06-29 16:21:23 -04:00
Sumit Bose 0350b5e8a1 Add objects for initial ID range 2012-06-29 16:21:20 -04:00
Sumit Bose ab6097bc6a Extend LDAP schema 
The objectclass ipaIDobject can be used to reserve local UIDs, GIDs or
SIDs for objects that are no neither users nor groups.

The ipa*IDRange objectclasses will be used to store the used Posix ID
ranges of the local domains (ipaDomainIDRange) or the ranges reserved
for AD domains (ipaTrustedADDomainRange). To be able to map the Posix
IDs to a RID and back the corresponding ranges can be saved here as
well.
 2012-06-29 16:21:17 -04:00
Sumit Bose 876b1ec175 Use lower case names in LDAP to meet freeIPA convention 2012-06-29 11:59:39 +02:00
Sumit Bose 316aac5a8d Add external domain extop DS plugin 
This extop can be used by clients of the IPA domain, e.g. sssd, to
retrieve data from trusted external domains. It can be used e.g. to map
Windows SIDs to user or groups names and back.
 2012-06-28 13:08:26 +02:00
Sumit Bose ac6afd31f7 Add configure check for C Unit-Test framework check 
The framework can be found at http://check.sourceforge.net.
 2012-06-28 08:13:22 +02:00
Sumit Bose dc3491ea42 Filter groups in the PAC 
If one or more of the external groups given in the PAC can be found in
the ipaExternalGroup objects and these objects are members of local
groups, the SIDs of the local groups are added to the PAC.
 2012-06-28 08:05:34 +02:00
Sumit Bose 65ad261663 Add sidgen postop and task 
A postop plugin is added to create the SID for new created users and
groups. A directory server task allows to set the SID for existing
users and groups.

Fixes https://fedorahosted.org/freeipa/ticket/2825
 2012-06-28 08:02:05 +02:00
Sumit Bose ee936431c8 Move some krb5 keys related functions from ipa-client to util 2012-06-11 12:04:05 +02:00
Sumit Bose 20fce97dfa ipasam: remove unused struct elements 2012-06-11 12:03:09 +02:00
Sumit Bose b367c9ee7e Use exop instead of kadmin.local 2012-06-11 09:40:59 +02:00
sbose e6d638b6cf Set samba_portmapper SELinux boolean during ipa-adtrust-install 2012-06-07 09:39:11 +02:00
Sumit Bose 808e75c13d Add a second module init call for newer samba versions 2011-12-09 15:57:49 -05:00
Sumit Bose 27f02881c1 Make pwd-extop aware of new ipaNTHash attribute 2011-12-06 08:29:53 -05:00
Sumit Bose 3de257fe54 activate CLDAP 2011-12-06 08:29:53 -05:00
Sumit Bose edb6ed5007 Add ipasam samba passdb backend 
https://fedorahosted.org/freeipa/ticket/1874
 2011-12-06 08:29:53 -05:00
Sumit Bose 7c3e5f1be5 Fix some pylint warnings 2011-12-06 08:29:53 -05:00
Sumit Bose 0945e46845 Use new objectclasses and attributes for trust 2011-12-06 08:29:53 -05:00
Sumit Bose 2d355da9e2 Add trust objectclass and attributes to v3 schema 2011-12-06 08:29:53 -05:00
Sumit Bose 9a14fa6c2f Move our own domain info into cn=etc 
https://fedorahosted.org/freeipa/ticket/2001
 2011-12-06 08:29:53 -05:00
Sumit Bose 2ac9d4816a Add DNS service records for Windows 
https://fedorahosted.org/freeipa/ticket/1939
 2011-11-30 11:28:39 +01:00
Sumit Bose d24dda2fe3 Add DNS service records for Windows 
https://fedorahosted.org/freeipa/ticket/1939
 2011-11-23 00:24:07 -05:00
Sumit Bose 3fb40170cb ipa-pwd-extop: allow password change on all connections with SSF>1 
Instead of checking the individual SSFs for SASL, SSL/TLS and LDAPI connection
the global SSF is checked for password changes and enrollments.

https://fedorahosted.org/freeipa/ticket/1877
 2011-10-05 17:20:13 +02:00
Sumit Bose f323d818b9 Add admin SIDs 
The admin SID DOMAIN-SID-500 will be assigned to the IPA admin user and the
admin group SID DOMAIN-SID-512 to the admins group.
 2011-09-23 19:25:45 -04:00
Sumit Bose c4e070c1fe Fix typo in v3 base schema 2011-09-21 08:29:58 -04:00
Sumit Bose 06ccb38c69 Update samba LDAP schema 
The samba LDAP schema is updated to the lastest version available from the
samba source code to be able to use the new trust related object class and
attributes.
 2011-09-20 17:27:40 -04:00
Sumit Bose 0ebe23dc96 Fix ACIs in ipa-adtrust-install 2011-09-20 17:27:40 -04:00
Sumit Bose 29a7a7e8ce Add ipa-adtrust-install utility 
https://fedorahosted.org/freeipa/ticket/1619
 2011-09-14 18:45:13 -04:00
Sumit Bose 579c8e56e0 Call standard_logging_setup() before any logging is done 2011-09-13 12:54:18 +02:00