freeipa

mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00

Files

Slava Aseev 18721cc830 ipa-kdb: handle dates up to 2106-02-07 06:28:16

krb5 uses the negative part of krb5_timestamp to store time values
after 2038:
https://k5wiki.kerberos.org/wiki/Projects/Timestamps_after_2038
In other words, krb5 uses krb5_timestamp (signed int) with
unsigned arithmetic for expanding the timestamp's upper bound.

This commit:
  - adds some helper functions for working with krb5_timestamp as
    unsigned (actually copied from
    https://github.com/krb5/krb5/blob/master/src/include/k5-int.h)
  - replaces operations with krb5_timestamp's by these new functions

Fixes: https://pagure.io/freeipa/issue/8028
Signed-off-by: Slava Aseev <ptrnine@altlinux.org>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Robbie Harwood <rharwood@redhat.com>

2020-12-19 11:02:16 +02:00

ipa_hostname.c

Easier to use ipa_gethostfqdn()

2020-10-26 17:11:19 +11:00

ipa_hostname.h

ipa_sam: do not modify static buffer holding fqdn

2020-10-26 17:11:19 +11:00

ipa_krb5.c

CVE-2020-1722: prevent use of too long passwords

2020-04-14 12:36:01 +03:00

ipa_krb5.h

ipa-kdb: handle dates up to 2106-02-07 06:28:16