freeipa

mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00

Files

Simo Sorce 7a20fc671b Allow to specify Kerberos authz data type per user

Like for services setting the ipaKrbAuthzData attribute on a user object will
allow us to control exactly what authz data is allowed for that user.
Setting NONE would allow no authz data, while setting MS-PAC would allow only
Active Directory compatible data.

Signed-off-by: Simo Sorce <simo@redhat.com>

Ticket: https://fedorahosted.org/freeipa/ticket/2579
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>

2016-03-09 19:00:43 +01:00

tests

ipa-kdb: get_authz_data_types() make sure entry can be NULL

2016-01-27 16:03:03 +01:00

ipa_kdb_audit_as.c

ipa-kdb: unexpected error code in 'ipa_kdb_audit_as_req' triggers a message

2015-01-30 11:02:16 +01:00

ipa_kdb_common.c

Always verify we have a valid ldap context.

2016-01-13 16:09:38 +01:00

ipa_kdb_delegation.c

ipa-kdb: fix delegation acl check

2012-02-28 13:03:22 -05:00

ipa_kdb_mkey.c

ipa-kdb: Get/Store Master Key directly from LDAP

2011-08-26 08:24:49 -04:00

ipa_kdb_mspac_private.h

ipa-kdb: add unit-test for filter_logon_info()

2015-07-08 01:56:52 +02:00

ipa_kdb_mspac.c

Allow to specify Kerberos authz data type per user

2016-03-09 19:00:43 +01:00

ipa_kdb_passwords.c

Detect default encsalts kadmin password change

2015-05-27 09:45:56 -04:00

ipa_kdb_principals.c

Allow admins to disable preauth for SPNs.

2016-03-08 18:48:40 +01:00

ipa_kdb_pwdpolicy.c

Detect default encsalts kadmin password change

2015-05-27 09:45:56 -04:00

ipa_kdb.c

Allow admins to disable preauth for SPNs.

2016-03-08 18:48:40 +01:00

ipa_kdb.exports

ipa-kdb: add exports file

2011-08-26 08:24:49 -04:00

ipa_kdb.h

Allow admins to disable preauth for SPNs.

2016-03-08 18:48:40 +01:00

Makefile.am

ipa-kdb: convert test to cmocka

2015-07-08 01:56:52 +02:00

README

ipa-kdb: Initial plugin skeleton

2011-08-26 08:24:49 -04:00

README.s4u2proxy.txt

Fix s4u2proxy README and add warning

2015-06-08 14:37:29 -04:00

README

This is the ipa krb5kdc database backend.