Rob Crittenden 33af154b7f validate_principal: Don't try to verify that the realm is known ...

The actual value is less important than whether it matches the
regular expression. A number of legal but difficult to know in
context realms could be passed in here (trust for example).

This fixes CVE-2024-1481

Fixes: https://pagure.io/freeipa/issue/9541

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>

2024-02-22 14:35:59 -05:00

..

install

validate_principal: Don't try to verify that the realm is known

2024-02-22 14:35:59 -05:00

__init__.py

Add context manager to ipalib.API

2023-09-29 12:57:06 +02:00

aci.py

De-duplicate ACI attributes and permissions

2020-09-14 09:15:59 +03:00

backend.py

pylint: remove unneeded disable=unused-private-member

2023-01-10 08:30:58 +01:00

base.py

pylint: fix errors

2024-01-09 08:40:47 +01:00

capabilities.py

Support AES for KRA archival wrapping

2022-03-16 12:07:01 +02:00

cli.py

pylint: Fix useless-suppression

2022-03-11 13:37:08 -05:00

config.py

Add 'cache_dir' option to api.env

2023-12-01 09:46:31 +01:00

constants.py

Add 'cache_dir' option to api.env

2023-12-01 09:46:31 +01:00

crud.py

ipalib, ipaserver: fix incorrect API.register calls in docstrings

2016-05-25 16:06:26 +02:00

dns.py

dnsrecord-mod: allow to modify ttl without passing the record

2019-07-01 09:16:21 +02:00

errors.py

rpcserver: fix exception handling for FAST armor failure

2020-10-30 19:06:11 +02:00

facts.py

Fall back to old server installation detection when needed

2020-08-18 11:11:26 +02:00

frontend.py

pylint: Fix cyclic-import

2023-01-10 08:30:58 +01:00

krb_utils.py

krb_utils: Simplify get_credentials

2021-06-12 11:19:25 +03:00

Makefile.am

Build: Makefiles for Python packages

2016-11-09 13:08:32 +01:00

messages.py

Warn for permissions with read/write/search/compare and no attrs

2022-07-15 16:59:15 +02:00

misc.py

plugins: Don't treat keys of api as bytes

2021-06-28 14:16:56 +03:00

output.py

Generate same API.txt under Python 2 and 3

2018-02-15 09:41:30 +01:00

parameters.py

Use datetime.timezone.utc instead of newer datetime.UTC alias

2023-09-29 15:06:33 -04:00

pkcs10.py

Change FreeIPA references to IPA and Identity Management

2021-01-21 13:51:45 +01:00

plugable.py

pylint: remove unneeded disable=unused-private-member

2023-01-10 08:30:58 +01:00

request.py

Py3: Remove subclassing from object

2018-09-27 11:49:04 +02:00

rpc.py

Use datetime.timezone.utc instead of newer datetime.UTC alias

2023-09-29 15:06:33 -04:00

setup.cfg

Port all setup.py to setuptools

2016-10-20 18:43:37 +02:00

setup.py

Use ssl.match_hostname from urllib3 as it was removed from Python 3.12

2023-07-19 08:27:30 +02:00

sysrestore.py

pylint: Fix consider-using-dict-items

2022-03-11 13:37:08 -05:00

text.py

pylint: Fix useless-suppression

2022-03-11 13:37:08 -05:00

util.py

IPA API changes to support RBCD

2023-04-05 14:55:22 -04:00

x509.py

Compatibility fix for PyCA cryptography 42.0.0

2024-01-24 14:54:24 +01:00