Go to file
Sumit Bose 1f0ca6aafd ipa_pwd_extop: do not generate NT hashes in FIPS mode
In FIPS mode NT hashes (aka md4) are not allowed. If FIPS more is
detected we disable NT hashes even is the are allowed by IPA
configuration.

Resolves https://pagure.io/freeipa/issue/7026

Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
2017-06-21 10:16:41 +02:00
asn1 fix minor spelling mistakes 2017-05-19 09:52:46 +02:00
client client install: fix client PKINIT configuration 2017-05-19 12:31:24 +02:00
contrib Add copy-schema-to-ca for RHEL6 to contrib/ 2017-03-14 15:16:20 +01:00
daemons ipa_pwd_extop: do not generate NT hashes in FIPS mode 2017-06-21 10:16:41 +02:00
doc scripts, tests: explicitly set confdir in the rest of server code 2017-02-22 08:07:48 +00:00
init Use Custodia 0.3.1 features 2017-03-28 15:02:06 +02:00
install ipa-dns-install: remove check for local ip address 2017-06-20 11:29:41 +02:00
ipaclient Remove network and broadcast address warnings 2017-06-20 11:29:41 +02:00
ipalib Remove network and broadcast address warnings 2017-06-20 11:29:41 +02:00
ipaplatform adtrust: move SELinux settings to constants 2017-05-26 08:32:05 +02:00
ipapython python-netifaces: update to reflect upstream changes 2017-06-20 13:52:10 +02:00
ipaserver Remove network and broadcast address warnings 2017-06-20 11:29:41 +02:00
ipatests CheckedIPAddress: remove match_local param 2017-06-20 11:29:41 +02:00
po fix minor spelling mistakes 2017-05-19 09:52:46 +02:00
pypi tox testing support for client wheel packages 2017-04-12 16:53:22 +02:00
util C compilation fixes and hardening 2017-03-01 10:38:01 +01:00
.git-commit-template git-commit-template: update ticket url to use pagure.io instead of fedorahosted.org 2017-03-28 13:10:08 +02:00
.gitignore tox testing support for client wheel packages 2017-04-12 16:53:22 +02:00
.mailmap Update Contributors.txt 2017-02-23 10:16:44 +01:00
.test_runner_config_py3_temp.yaml Travis: enable temporary Py3 testing 2017-06-20 12:36:29 +02:00
.test_runner_config.yaml travis: fix pylint execution with py3 2017-05-29 14:44:29 +02:00
.tox-install.sh tox testing support for client wheel packages 2017-04-12 16:53:22 +02:00
.travis_run_task.sh Travis: build only py2 packages for py2 testing 2017-06-20 12:36:29 +02:00
.travis.yml Travis: enable temporary Py3 testing 2017-06-20 12:36:29 +02:00
.wheelconstraints.in tox: use pylint 1.6.x for now 2017-04-25 12:24:48 +02:00
ACI.txt Add --password-expiration to allow admin to force user password expiration 2017-03-31 12:19:40 +02:00
API.txt trust-mod: allow modifying list of UPNs of a trusted forest 2017-06-14 16:38:12 +02:00
autogen.sh build tweaks - use automake's foreign mode, avoid creating empty files to satisfy gnu mode - run autoreconf -f to ensure that everything matches 2010-11-29 11:39:55 -05:00
BUILD.txt Build: allow to build only py2 rpms for fedora 2017-06-20 12:36:29 +02:00
configure.ac configure: fix AC_CHECK_LIB usage 2017-04-19 13:56:23 +00:00
Contributors.txt Update Contributors.txt 2017-02-23 10:16:44 +01:00
COPYING Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
COPYING.openssl Add a clear OpenSSL exception. 2015-02-23 16:25:54 +01:00
freeipa.spec.in Build: allow to build only py2 rpms for fedora 2017-06-20 12:36:29 +02:00
ignore_import_errors.py makeapi, makeaci: do not fail on missing imports 2016-10-24 14:11:08 +02:00
ipa Use entry_points for ipa CLI 2017-04-11 13:29:50 +02:00
ipasetup.py.in ipasetup: fix dependencies handling based on python version 2017-05-16 11:53:33 +02:00
make-doc Make an ipa-tests package 2013-06-17 19:22:50 +02:00
make-test Use pytest conftest.py and drop pytest.ini 2017-01-05 17:37:02 +01:00
makeaci makeapi, makeaci: do not fail on missing imports 2016-10-24 14:11:08 +02:00
makeapi Python3 pylint fixes 2016-11-25 16:18:22 +01:00
Makefile.am Build: allow to build only py2 rpms for fedora 2017-06-20 12:36:29 +02:00
Makefile.python.am Add PYTHON_INSTALL_EXTRA_OPTIONS and --install-layout=deb 2017-03-15 13:48:23 +01:00
makerpms.sh Build: update makerpms.sh to use same paths as rpmbuild 2016-11-16 09:12:07 +01:00
pylint_plugins.py Add code to be able to set default kinit lifetime 2017-06-07 15:36:26 +02:00
pylintrc pylint: ignore new checks added in 1.7 2017-05-29 18:37:41 +02:00
README.md Change README to use Markdown 2017-03-02 16:55:57 +01:00
server.m4 configure: fix AC_CHECK_LIB usage 2017-04-19 13:56:23 +00:00
tox.ini Slim down dependencies 2017-05-09 17:17:29 +02:00
VERSION.m4 trust-mod: allow modifying list of UPNs of a trusted forest 2017-06-14 16:38:12 +02:00
zanata.xml Zanata: exlude testing ipa.pot file 2016-11-21 14:47:47 +01:00

FreeIPA Server

FreeIPA allows Linux administrators to centrally manage identity, authentication and access control aspects of Linux and UNIX systems by providing simple to install and use command line and web based managment tools.

FreeIPA is built on top of well known Open Source components and standard protocols with a very strong focus on ease of management and automation of installation and configuration tasks.

FreeIPA can seamlessly integrate into an Active Directory environment via cross-realm Kerberos trust or user synchronization.

Benefits

FreeIPA:

  • Allows all your users to access all the machines with the same credentials and security settings
  • Allows users to access personal files transparently from any machine in an authenticated and secure way
  • Uses an advanced grouping mechanism to restrict network access to services and files only to specific users
  • Allows central management of security mechanisms like passwords, SSH Public Keys, SUDO rules, Keytabs, Access Control Rules
  • Enables delegation of selected administrative tasks to other power users
  • Integrates into Active Directory environments

Components

The FreeIPA project provides unified installation and management tools for the following components:

Project Website

Releases, announcements and other information can be found on the IPA server project page at http://www.freeipa.org/ .

Documentation

The most up-to-date documentation can be found at http://freeipa.org/page/Documentation .

Quick Start

To get started quickly, start here: http://www.freeipa.org/page/Quick_Start_Guide

Licensing

Please see the file called COPYING.

Contacts