IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2026-09-03 20:52:56 -05:00
Code Issues Packages Projects Releases Wiki Activity
5,270 Commits 11 Branches 63 Tags
fe083fd5bf692e88a90bcd4b53f7a16e1a985ffd
Commit Graph
61 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Sumit Bose fe083fd5bf IDRange CLI: Add documentation 
Fixes https://fedorahosted.org/freeipa/ticket/2969
 2012-09-07 16:50:35 +02:00
Sumit Bose 67b47a65f2 IDRange CLI: allow to work without arguments 
Fixes https://fedorahosted.org/freeipa/ticket/2999
 2012-09-07 16:50:35 +02:00
Sumit Bose 377e1267b7 Rename range CLI to idrange 2012-09-07 16:50:35 +02:00
Sumit Bose bd7f3e4b17 ipasam: replace trim_char() with trim_string() 2012-09-06 09:24:59 +02:00
Sumit Bose 931e890680 ipasam: remove fetch_ldap_pw() 2012-09-06 09:24:59 +02:00
Sumit Bose 260940ceb4 ipasam: replace get_global_sam_sid() 2012-09-06 09:24:59 +02:00
Sumit Bose 621b28a4a0 ipasam: add libsss_idmap context and replace string_to_sid() 2012-09-06 09:24:59 +02:00
Sumit Bose dbd4cb51d3 ipasam: Replace global_sid_Builtin 2012-09-06 09:24:59 +02:00
Sumit Bose af02b9e0a9 ipasam: Replace sid_peek_check_rid() 2012-09-06 09:24:59 +02:00
Sumit Bose fa7f5a8327 ipasam: Replace sid_check_is_our_sam() 2012-09-06 09:24:59 +02:00
Sumit Bose 8697b70d6b ipasam: Replace dom_sid_compare_domain() 2012-09-06 09:24:59 +02:00
Sumit Bose f864d766eb ipasam: Replace is_null_sid() 2012-09-06 09:24:59 +02:00
Sumit Bose 4f7af98571 ipasam: replace sid_compose() 2012-09-06 09:24:58 +02:00
Sumit Bose 454c2d4e8c ipasam: replace sid_copy() 2012-09-06 09:24:58 +02:00
Sumit Bose 885f4a6bb8 ipasam: remove talloc_asprintf_strupper_m() 2012-09-06 09:24:58 +02:00
Sumit Bose 2877cb4c0d ipasam: remove strlower_m() 2012-09-06 09:24:58 +02:00
Sumit Bose 33494689a2 ipasam: replace strnequal() 2012-09-06 09:24:58 +02:00
Sumit Bose 128257c68b ipasam: remove sid_peek_rid() 2012-09-06 09:24:58 +02:00
Sumit Bose 50a0b84176 ipasam: remove nt_lm_owf_gen() and dependency to libcliauth.so 2012-09-06 09:24:58 +02:00
Sumit Bose 973aad9db3 Make encode_ntlm_keys() public 2012-09-06 09:24:58 +02:00
Sumit Bose d90fb0a590 ipasam: cleanup explicit dependencies to samba libs 2012-09-06 09:24:58 +02:00
Sumit Bose 83245bc8c9 ipadb_iterate(): handle match_entry == NULL 
If match_entry == NULL all principals should be iterated.

Additionally this patch adds a check in ipadb_filter_escape() to make
sure that the input is not NULL.

Fixes: https://fedorahosted.org/freeipa/ticket/3011
 2012-09-05 14:20:29 +02:00
Sumit Bose e8d4cc65f8 Use libsamba-security instead of libsecurity 
In samba4-beta6 the name of a library was changed from libsecurity to
libsamba-security.
 2012-08-22 17:18:07 +03:00
Sumit Bose 59df038f87 trust CLI: add ID range for new trusted domain 2012-08-15 23:41:17 -04:00
Sumit Bose d815c3bc99 extdom: read ranges from LDAP 2012-08-15 23:41:06 -04:00
Sumit Bose 0ffb2022fe Fix typo 
Signed-off-by: Simo Sorce <ssorce@redhat.com>
 2012-07-09 08:36:05 -04:00
Sumit Bose 76d809574b ipasam: replace testing code 2012-07-06 13:06:16 +03:00
Sumit Bose abe40284cf ipasam: fixes for clang warnings 2012-07-06 13:06:16 +03:00
Sumit Bose 7fb9ca23a1 Allow silent build if available 2012-07-06 13:06:15 +03:00
Sumit Bose 06b298e93a Use DN objects instead of strings in adtrustinstance 2012-07-01 17:41:57 -04:00
Sumit Bose bdb995194c Add range check preop plugin 
To make sure that ID ranges do not overlap this plugin checks new
additions and changes for conflicts with existing ranges.

https://fedorahosted.org/freeipa/ticket/2185
 2012-06-29 18:00:58 -04:00
Sumit Bose fbebe82811 Add CLI for ID ranges 
https://fedorahosted.org/freeipa/ticket/2185
 2012-06-29 18:00:50 -04:00
Sumit Bose e809802aed Set RID bases for local domain during ipa-adtrust-install 2012-06-29 16:21:23 -04:00
Sumit Bose 0350b5e8a1 Add objects for initial ID range 2012-06-29 16:21:20 -04:00
Sumit Bose ab6097bc6a Extend LDAP schema 
The objectclass ipaIDobject can be used to reserve local UIDs, GIDs or
SIDs for objects that are no neither users nor groups.

The ipa*IDRange objectclasses will be used to store the used Posix ID
ranges of the local domains (ipaDomainIDRange) or the ranges reserved
for AD domains (ipaTrustedADDomainRange). To be able to map the Posix
IDs to a RID and back the corresponding ranges can be saved here as
well.
 2012-06-29 16:21:17 -04:00
Sumit Bose 876b1ec175 Use lower case names in LDAP to meet freeIPA convention 2012-06-29 11:59:39 +02:00
Sumit Bose 316aac5a8d Add external domain extop DS plugin 
This extop can be used by clients of the IPA domain, e.g. sssd, to
retrieve data from trusted external domains. It can be used e.g. to map
Windows SIDs to user or groups names and back.
 2012-06-28 13:08:26 +02:00
Sumit Bose ac6afd31f7 Add configure check for C Unit-Test framework check 
The framework can be found at http://check.sourceforge.net.
 2012-06-28 08:13:22 +02:00
Sumit Bose dc3491ea42 Filter groups in the PAC 
If one or more of the external groups given in the PAC can be found in
the ipaExternalGroup objects and these objects are members of local
groups, the SIDs of the local groups are added to the PAC.
 2012-06-28 08:05:34 +02:00
Sumit Bose 65ad261663 Add sidgen postop and task 
A postop plugin is added to create the SID for new created users and
groups. A directory server task allows to set the SID for existing
users and groups.

Fixes https://fedorahosted.org/freeipa/ticket/2825
 2012-06-28 08:02:05 +02:00
Sumit Bose ee936431c8 Move some krb5 keys related functions from ipa-client to util 2012-06-11 12:04:05 +02:00
Sumit Bose 20fce97dfa ipasam: remove unused struct elements 2012-06-11 12:03:09 +02:00
Sumit Bose b367c9ee7e Use exop instead of kadmin.local 2012-06-11 09:40:59 +02:00
sbose e6d638b6cf Set samba_portmapper SELinux boolean during ipa-adtrust-install 2012-06-07 09:39:11 +02:00
Sumit Bose 808e75c13d Add a second module init call for newer samba versions 2011-12-09 15:57:49 -05:00
Sumit Bose 27f02881c1 Make pwd-extop aware of new ipaNTHash attribute 2011-12-06 08:29:53 -05:00
Sumit Bose 3de257fe54 activate CLDAP 2011-12-06 08:29:53 -05:00
Sumit Bose edb6ed5007 Add ipasam samba passdb backend 
https://fedorahosted.org/freeipa/ticket/1874
 2011-12-06 08:29:53 -05:00
Sumit Bose 7c3e5f1be5 Fix some pylint warnings 2011-12-06 08:29:53 -05:00
Sumit Bose 0945e46845 Use new objectclasses and attributes for trust 2011-12-06 08:29:53 -05:00
Sumit Bose 2d355da9e2 Add trust objectclass and attributes to v3 schema 2011-12-06 08:29:53 -05:00
Sumit Bose 9a14fa6c2f Move our own domain info into cn=etc 
https://fedorahosted.org/freeipa/ticket/2001
 2011-12-06 08:29:53 -05:00
Sumit Bose 2ac9d4816a Add DNS service records for Windows 
https://fedorahosted.org/freeipa/ticket/1939
 2011-11-30 11:28:39 +01:00
Sumit Bose d24dda2fe3 Add DNS service records for Windows 
https://fedorahosted.org/freeipa/ticket/1939
 2011-11-23 00:24:07 -05:00
Sumit Bose 3fb40170cb ipa-pwd-extop: allow password change on all connections with SSF>1 
Instead of checking the individual SSFs for SASL, SSL/TLS and LDAPI connection
the global SSF is checked for password changes and enrollments.

https://fedorahosted.org/freeipa/ticket/1877
 2011-10-05 17:20:13 +02:00
Sumit Bose f323d818b9 Add admin SIDs 
The admin SID DOMAIN-SID-500 will be assigned to the IPA admin user and the
admin group SID DOMAIN-SID-512 to the admins group.
 2011-09-23 19:25:45 -04:00
Sumit Bose c4e070c1fe Fix typo in v3 base schema 2011-09-21 08:29:58 -04:00
Sumit Bose 06ccb38c69 Update samba LDAP schema 
The samba LDAP schema is updated to the lastest version available from the
samba source code to be able to use the new trust related object class and
attributes.
 2011-09-20 17:27:40 -04:00
Sumit Bose 0ebe23dc96 Fix ACIs in ipa-adtrust-install 2011-09-20 17:27:40 -04:00
Sumit Bose 29a7a7e8ce Add ipa-adtrust-install utility 
https://fedorahosted.org/freeipa/ticket/1619
 2011-09-14 18:45:13 -04:00
Sumit Bose 579c8e56e0 Call standard_logging_setup() before any logging is done 2011-09-13 12:54:18 +02:00