freeipa/ipa-server
Simo Sorce 0368d4329a Used the encrypt_file and decrypt_file utility functions to encrypt replica
information. This way we do not risk to leave around sensitive data.
Set the destination host in the replica file too and do checks against
in ipa-replica-install
2008-08-11 18:30:57 -04:00
..
ipa-gui Use larger set from which to choose chars for random passwords. 2008-08-11 18:30:40 -04:00
ipa-install Used the encrypt_file and decrypt_file utility functions to encrypt replica 2008-08-11 18:30:57 -04:00
ipa-kpasswd In openvz we found out some interfaces may return a null pointer here. 2008-07-15 16:16:33 -04:00
ipa-slapi-plugins Treat Jan 1 1970 in krbPrincipalExpiration as a special date that means 2008-08-07 11:50:33 -04:00
ipaserver NSS 3.12 added a header to the certutil output we need to skip 2008-07-28 09:55:49 -04:00
man Rework the way SSL certificates are imported from PKCS#12 files. 2008-07-14 09:06:52 -04:00
selinux After the rework of the code that binds to specific interfaces to 2008-07-07 10:01:20 -04:00
xmlrpc-server Shift search base for users and groups to "cn=accounts, baseDN" 2008-07-29 11:33:51 -04:00
.hgignore Autotool ipa-server - patch from William Jon McCann <mccann@jhu.edu>. 0001-01-01 00:00:00 +00:00
AUTHORS Fix build from autoconf patch import. 0001-01-01 00:00:00 +00:00
autogen.sh Fix autogen.sh to correctly compare versions and removed .la files from packages. 0001-01-01 00:00:00 +00:00
configure.ac Very ugly fix to configure to make it actually find a 2008-06-16 13:52:26 -04:00
ipa-server.spec.in Specify --mandir to configure to fix building on CentOS 5.2 2008-07-28 09:53:38 -04:00
ipa-upgradeconfig Refine our web space some more so that everything we reference is in /ipa 2008-05-07 09:41:32 -04:00
Makefile.am Second half of the redoing how the version is managed. 2008-05-07 18:26:03 -04:00
NEWS Fix build from autoconf patch import. 0001-01-01 00:00:00 +00:00
README Add a copy of the LICENSE and populate some README's 2008-01-23 10:30:18 -05:00

IPA uses Kerberos with an LDAP storage backend and some custom plugins
to help manage users and passwords.

A UI interface is provided to make user administration and self-service
possible. A set of command-line utilities that should provide the same
capabilities is in ipa-admintools.

Firefox
-------

The Gecko engine provides an interface for managing a user's configuration
in Javascript. Naturally this is highly protected and the user gets an
appropriately dire warning when you try to do this. It also requires 
signed javascript.

During installation a signing certificate is created that creates
and signs /usr/share/ipa/html/configure.jar which contains the javascript
to update the browser configuration. User's are directed to go to
/errors/preferencs.html to load this javascript and apply the changes.