freeipa/daemons/ipa-kdb
Sumit Bose 117d6e9be0 ipa-kdb: use canonical principal in certauth plugin
Currently the certauth plugin use the unmodified principal from the
request to lookup the user. This might fail if e.g. enterprise
principals are use. With this patch the canonical principal form the kdc
entry is used.

Resolves https://pagure.io/freeipa/issue/6993

Reviewed-By: David Kupka <dkupka@redhat.com>
2017-06-07 14:00:06 +02:00
..
tests Build: adjust include paths in daemons/ipa-kdb/tests/ipa_kdb_tests.c 2016-10-24 13:30:12 +02:00
ipa_kdb_audit_as.c ipa-kdb: unexpected error code in 'ipa_kdb_audit_as_req' triggers a message 2015-01-30 11:02:16 +01:00
ipa_kdb_certauth.c ipa-kdb: use canonical principal in certauth plugin 2017-06-07 14:00:06 +02:00
ipa_kdb_common.c Add code to retrieve results from multiple bases 2017-03-10 09:17:28 +01:00
ipa_kdb_delegation.c ipa-kdb: fix delegation acl check 2012-02-28 13:03:22 -05:00
ipa_kdb_mkey.c ipa-kdb: Get/Store Master Key directly from LDAP 2011-08-26 08:24:49 -04:00
ipa_kdb_mspac_private.h adtrust: support UPNs for trusted domain users 2016-06-11 17:25:50 +02:00
ipa_kdb_mspac.c Fix s4u2self with adtrust 2017-04-12 09:46:43 +02:00
ipa_kdb_passwords.c Allow unexpiring passwords 2016-07-01 11:22:02 +02:00
ipa_kdb_principals.c ipa-kdb: add ipadb_fetch_principals_with_extra_filter() 2017-03-27 09:52:57 +02:00
ipa_kdb_pwdpolicy.c Add support for searching policies in cn=accounts 2017-03-10 09:17:28 +01:00
ipa_kdb.c ipa-kdb: do not depend on certauth_plugin.h 2017-03-27 17:57:28 +02:00
ipa_kdb.exports IPA certauth plugin 2017-03-27 09:52:57 +02:00
ipa_kdb.h ipa-kdb: do not depend on certauth_plugin.h 2017-03-27 17:57:28 +02:00
ipa-certauth IPA-KDB: use relative path in ipa-certmap config snippet 2017-04-05 07:30:41 +00:00
Makefile.am IPA-KDB: use relative path in ipa-certmap config snippet 2017-04-05 07:30:41 +00:00
README ipa-kdb: Initial plugin skeleton 2011-08-26 08:24:49 -04:00
README.s4u2proxy.txt Fix s4u2proxy README and add warning 2015-06-08 14:37:29 -04:00

This is the ipa krb5kdc database backend.