Changmin Teng 15ff9c8fec Implement user pre-authentication control with kdcpolicy plugin ...

We created a Kerberos kdcpolicy plugin to enforce user
pre-authentication policy for newly added pkinit and hardened policy.

In the past version of freeIPA, password enforcement exists but was done
by removing key data for a principal while parsing LDAP entry for it.
This hack is also removed and is now also enforced by kdcpolicy plugin
instead.

Resolves: https://pagure.io/freeipa/issue/8001
Signed-off-by: Changmin Teng <cteng@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Simo Sorce <ssorce@redhat.com>
Reviewed-By: Robbie Harwood <rharwood@redhat.com>

2019-09-10 12:33:21 +03:00

..

dnssec

Replace PYTHONSHEBANG with valid shebang

2019-06-24 09:35:57 +02:00

ipa-kdb

Implement user pre-authentication control with kdcpolicy plugin

2019-09-10 12:33:21 +03:00

ipa-otpd

Py3: Replace six.moves imports

2018-10-05 12:06:19 +02:00

ipa-sam

ipasam: add handling of machine accounts

2019-06-29 11:00:28 +03:00

ipa-slapi-plugins

ipa-extdom-extop: test timed out getgrgid_r

2019-08-19 11:20:57 +03:00

ipa-version.h.in

Build: move version handling from Makefile to configure

2016-11-09 13:08:32 +01:00

Makefile.am

Build: properly integrate ipa-version.h.in into build system

2016-11-29 15:28:24 +01:00