Go to file
Sumit Bose 091e8fac34 Use the right attribute with ipapwd_entry_checks for MagicRegen
There is a special mode to set the ipaNTHash attribute if a RC4 Kerberos
key is available for the corresponding user. This is typically triggered
by samba via the ipa_sam passdb plugin. The principal used by samba to
connect to the IPA directory server has the right to modify ipaNTHash
but no other password attribute. This means that the current check on
the userPassword attribute is too strict for this case and leads to a
failure of the whole operation.

With this patch the access right on ipaNTHash are checked if no other
password operations are requested.
2013-10-08 09:18:57 +02:00
.tx Update translations 2013-08-02 16:54:25 +02:00
checks Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
contrib Set master_kdc and dns_lookup_kdc to true 2012-09-19 20:47:12 -04:00
daemons Use the right attribute with ipapwd_entry_checks for MagicRegen 2013-10-08 09:18:57 +02:00
doc Add the version option to all Commands 2013-02-21 16:26:09 +01:00
init Remove systemd upgrader as it is not used anymore 2013-08-15 08:49:15 +02:00
install Do not allow '%' in DM password 2013-10-04 17:41:20 +02:00
ipa-client ipa-client-install: Verify RPC connection with a ping 2013-10-04 15:33:58 +02:00
ipalib Document no_search in Param flags 2013-10-07 14:00:52 +02:00
ipapython ipapython.nsslib: Name arguments to NSPRError 2013-10-04 15:49:19 +02:00
ipaserver Do not fail upgrade if the global anonymous read ACI is not found 2013-10-04 15:41:56 +02:00
ipatests Add tests for installing with empty PKCS#12 password 2013-10-04 10:27:23 +02:00
util ipa-kdb: read SID blacklist from LDAP 2013-02-12 10:37:47 +01:00
.bzrignore Added top-level tests/ package that will contain all unit tests 2008-10-07 20:36:44 -06:00
.gitignore Add man pages for testing tools 2013-08-29 15:18:34 +02:00
API.txt trusts: support subdomains in a forest 2013-10-04 10:25:31 +02:00
autogen.sh build tweaks - use automake's foreign mode, avoid creating empty files to satisfy gnu mode - run autoreconf -f to ensure that everything matches 2010-11-29 11:39:55 -05:00
BUILD.txt Remove obsolete self-sign references from man pages, docstrings, comments 2013-04-15 16:56:06 -04:00
Contributors.txt Add Nathaniel McCallum to Contributors.txt 2013-05-02 15:19:40 -04:00
COPYING Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
freeipa.spec.in Require new SSSD to pull required AD subdomain fixes 2013-10-04 10:25:31 +02:00
ipa Execute /usr/bin/python directly instead of /usr/bin/env python 2011-01-14 16:27:48 -05:00
ipa.1 Fix various typos. 2012-09-18 08:45:28 +02:00
lite-server.py Tweak the session auth to reflect developer consensus. 2012-02-27 05:54:29 -05:00
make-doc Make an ipa-tests package 2013-06-17 19:22:50 +02:00
make-lint Make make-lint compatible with Pylint 1.0 2013-09-06 15:43:25 +02:00
make-test Make sure appropriate exit status is returned in make-test 2013-02-25 13:32:34 +01:00
make-testcert Make an ipa-tests package 2013-06-17 19:22:50 +02:00
makeapi Add client capabilities, enable messages 2013-02-21 16:26:09 +01:00
Makefile Use /usr/bin/python as fallback python path 2013-09-16 17:35:22 +02:00
MANIFEST.in Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
README Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
setup-client.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
setup.py Provide ipa-advise tool 2013-07-17 13:49:59 +02:00
TODO Parse comma-separated lists of values in all parameter types. This can be enabled for a specific parameter by setting the "csv" option to True. 2011-11-30 17:08:35 +01:00
VERSION Fix tests which fail after ipa-adtrust-install 2013-08-28 16:45:57 +02:00
version.m4.in Mass tree reorganization for IPAv2. To view previous history of files use: 2009-02-03 15:27:14 -05:00

                               IPA Server

  What is it?
  -----------

  For efficiency, compliance and risk mitigation, organizations need to
  centrally manage and correlate vital security information including:

    * Identity (machine, user, virtual machines, groups, authentication
      credentials)
    * Policy (configuration settings, access control information)
    * Audit (events, logs, analysis thereof) 

  Since these are not new problems. there exist many approaches and
  products focused on addressing them. However, these tend to have the
  following weaknesses:

    * Focus on solving identity management across the enterprise has meant
      less focus on policy and audit.
    * Vendor focus on Web identity management problems has meant less well
      developed solutions for central management of the Linux and Unix
      world's vital security info. Organizations are forced to maintain
      a hodgepodge of internal and proprietary solutions at high TCO.
    * Proprietary security products don't easily provide access to the
      vital security information they collect or manage. This makes it
      difficult to synchronize and analyze effectively. 

  The Latest Version
  ------------------

  Details of the latest version can be found on the IPA server project
  page under <http://www.freeipa.org/>.

  Documentation
  -------------

  The most up-to-date documentation can be found at
  <http://freeipa.org/page/Documentation/>.

  Quick Start
  -----------

  To get started quickly, start here:
  <https://fedorahosted.org/freeipa/wiki/QuickStartGuide>

  Licensing
  ---------

  Please see the file called COPYING.

  Contacts
  --------

     * If you want to be informed about new code releases, bug fixes,
       security fixes, general news and information about the IPA server
       subscribe to the freeipa-announce mailing list at
       <https://www.redhat.com/mailman/listinfo/freeipa-interest/>.

     * If you have a bug report please submit it at:
       <https://bugzilla.redhat.com>

     * If you want to participate in actively developing IPA please
       subscribe to the freeipa-devel mailing list at
       <https://www.redhat.com/mailman/listinfo/freeipa-devel/> or join
       us in IRC at irc://irc.freenode.net/freeipa