Nathaniel McCallum 7ad9f5d3d5 Prefer TCP connections to UDP in krb5 clients ... In general, TCP is a better fit for FreeIPA due to large packet sizes. However, there is also a specific need for TCP when using OTP. If a UDP packet is delivered to the server and the server takes longer to process it than the client timeout (likely), the OTP value will be resent. Unfortunately, this will cause failures or even lockouts. Switching to TCP avoids this problem altogether. https://fedorahosted.org/freeipa/ticket/4725 Reviewed-By: Martin Kosek <mkosek@redhat.com>		2014-12-08 10:56:06 +01:00
..
advise	Add ipa-advise plugins for nss-pam-ldapd legacy clients	2013-10-18 16:15:12 +02:00
05rfc2247.ldif	Make schema files conform to new updater	2013-11-18 16:54:21 +01:00
15rfc2307bis.ldif	Add formerly update-only schema	2013-11-18 16:54:21 +01:00
15rfc4876.ldif	Add formerly update-only schema	2013-11-18 16:54:21 +01:00
60basev2.ldif	idviews: Add necessary schema for the ID views	2014-09-30 10:42:06 +02:00
60basev3.ldif	DNSSEC: schema	2014-10-21 12:23:03 +02:00
60ipaconfig.ldif	Unify capitalization of attribute names in schema files	2013-11-18 16:54:22 +01:00
60ipadns.ldif	DNSSEC: schema	2014-10-21 12:23:03 +02:00
60ipapk11.ldif	DNSSEC: schema	2014-10-21 12:23:03 +02:00
60kerberos.ldif	Add support for account unlocking	2011-01-28 10:23:02 -05:00
60samba.ldif	Make schema files conform to new updater	2013-11-18 16:54:21 +01:00
61kerberos-ipav3.ldif	Perform case-insensitive searches for principals on TGS requests	2012-06-07 09:39:10 +02:00
65ipacertstore.ldif	Add LDAP schema for certificate store.	2014-07-30 16:04:21 +02:00
65ipasudo.ldif	Update X-ORIGIN for 4.0	2014-07-01 13:57:06 +02:00
70ipaotp.ldif	Make token auth and sync windows configurable	2014-12-05 13:42:19 +01:00
71idviews.ldif	Change ipaOverrideTarget OID to avoid conflict with DNSSEC feature	2014-10-21 10:47:02 +03:00
anonymous-vlv.ldif	Let anonymous users browse the VLV index	2009-07-10 16:45:45 -04:00
automember.ldif	34 Create FreeIPA CLI Plugin for the 389 Auto Membership plugin	2011-08-31 09:49:43 +02:00
bind.named.conf.template	DNSSEC: validate forwarders	2014-10-21 12:23:03 +02:00
bind.zone.db.template	Fix: DNS installer adds invalid zonemgr email	2014-11-13 10:36:28 +00:00
bootstrap-template.ldif	Add container for certificate store.	2014-07-30 16:04:21 +02:00
caJarSigningCert.cfg.template	Add signing profile to CA installation so we can sign the firefox jar file.	2009-05-04 16:54:42 -04:00
certmap.conf.template	Fix selected minor issues in the spec file and license	2013-08-13 15:31:46 +02:00
copy-schema-to-ca.py	copy_schema_to_ca: Fallback to old import location for ipaplatform.services	2014-11-25 09:20:28 +01:00
default-aci.ldif	keytab: Add new extended operation to get a keytab.	2014-06-26 10:30:53 +02:00
default-hbac.ldif	Remove sourcehostcategory from the default HBAC rule.	2014-02-06 16:46:24 +01:00
default-smb-group.ldif	Change DNA magic value to -1 to make UID 999 usable	2013-03-11 17:07:07 +01:00
default-trust-view.ldif	idviews: Add Default Trust View as part of adtrustinstall	2014-09-30 10:42:06 +02:00
delegation.ldif	Convert Service default permissions to managed	2014-06-24 13:53:41 +02:00
disable-betxn.ldif	Explicitly disable betxn plugins for the time being.	2012-10-10 20:24:10 -04:00
dna.ldif	Change DNA magic value to -1 to make UID 999 usable	2013-03-11 17:07:07 +01:00
dns.ldif	Fix: Missing ACI for records in 40-dns.update	2014-07-04 12:27:24 +02:00
dnssec.ldif	DNSSEC: DNS key synchronization daemon	2014-10-21 12:23:03 +02:00
ds-nfiles.ldif	Autotune directory server to use a greater number of files	2010-11-22 12:42:16 -05:00
encrypted_attribute.ldif	Mass tree reorganization for IPAv2. To view previous history of files use:	2009-02-03 15:27:14 -05:00
entryusn.ldif	Address entryusn initialization on replica installation	2011-01-28 13:58:43 -05:00
fedora-ds.init.patch	Mass tree reorganization for IPAv2. To view previous history of files use:	2009-02-03 15:27:14 -05:00
host_nis_groups.ldif	Move Managed Entries into their own container in the replicated space.	2011-09-12 16:28:27 -04:00
indices.ldif	Add missing equality index for ipaUniqueId.	2013-07-11 12:39:26 +03:00
kdc_extensions.template	Add support for configuring KDC certs for PKINIT	2010-11-18 15:09:36 -05:00
kdc_req.conf.template	Add support for configuring KDC certs for PKINIT	2010-11-18 15:09:36 -05:00
kdc.conf.template	ipa-kdb: Change install to use the new ipa-kdb kdc backend	2011-08-26 08:24:50 -04:00
kerberos.ldif	Add Camellia ciphers to allowed list.	2013-07-18 10:49:38 +03:00
key_escrow_schema.ldif	Re-number some attributes to compress our usage to be contiguous	2010-05-27 10:50:49 -04:00
krb5.conf.template	Prefer TCP connections to UDP in krb5 clients	2014-12-08 10:56:06 +01:00
krb5.ini.template	Set master_kdc and dns_lookup_kdc to true	2012-09-19 20:47:12 -04:00
krb.con.template	Mass tree reorganization for IPAv2. To view previous history of files use:	2009-02-03 15:27:14 -05:00
krb.js.template	Build and installation of Kerberos authentication extension	2012-10-04 18:08:04 -04:00
krbrealm.con.template	Mass tree reorganization for IPAv2. To view previous history of files use:	2009-02-03 15:27:14 -05:00
ldapi.ldif	Enable ldapi connections in the management framework.	2009-08-27 13:36:58 -04:00
Makefile.am	DNSSEC: opendnssec services	2014-10-21 12:23:03 +02:00
managed-entries.ldif	Move Managed Entries into their own container in the replicated space.	2011-09-12 16:28:27 -04:00
master-entry.ldif	Use FQDN in place of FQHN for consistency in sub_dict.	2012-02-15 20:27:34 -05:00
memberof-conf.ldif	Display user and host membership in netgroups.	2010-11-24 08:38:41 -05:00
memberof-task.ldif	Wait for memberof task and DS to start before proceeding in installation.	2011-04-22 11:43:50 +02:00
modrdn-krbprinc.ldif	The precendence on the modrdn plugin was set in the wrong location.	2011-09-13 17:36:59 +02:00
nis.uldif	Enable transactions by default, make password and modrdn TXN-aware	2012-11-21 14:55:12 +01:00
opendnssec_conf.template	DNSSEC: opendnssec services	2014-10-21 12:23:03 +02:00
opendnssec_kasp.template	DNSSEC: opendnssec services	2014-10-21 12:23:03 +02:00
preferences.html.template	Set network.http.sendRefererHeader to 2 on browser config	2012-06-22 10:44:45 +02:00
referint-conf.ldif	Update referential integrity config for DS 1.3.3	2014-09-12 17:42:08 +02:00
replica-acis.ldif	Replace "replica admins read access" ACI with a permission	2014-05-21 09:57:16 +02:00
replica-automember.ldif	34 Create FreeIPA CLI Plugin for the 389 Auto Membership plugin	2011-08-31 09:49:43 +02:00
replica-s4u2proxy.ldif	Add cifs principal to S4U2Proxy targets only when running ipa-adtrust-install	2012-10-09 18:15:01 -04:00
repoint-managed-entries.ldif	Move Managed Entries into their own container in the replicated space.	2011-09-12 16:28:27 -04:00
root-autobind.ldif	Remove root autobind search restriction, fix upgrade logging & error handling.	2011-06-13 09:51:05 +02:00
sasl-mapping-fallback.ldif	Enable SASL mapping fallback.	2013-06-27 17:06:51 +02:00
schema_compat.uldif	Support idviews in compat tree	2014-10-20 16:47:49 +02:00
schema-update.ldif	Fix nsslapdPlugin object class after initial replication.	2013-09-10 09:49:43 +02:00
smb.conf.empty	Add trust management for Active Directory trusts	2012-06-07 09:39:09 +02:00
smb.conf.template	ipa-adtrust-install: configure host netbios name by default	2014-01-20 10:35:03 +01:00
sudobind.ldif	Create default disabled sudo bind user	2011-02-23 15:32:24 -05:00
unique-attributes.ldif	Add uniqueness plugin configuration for sudorule cn	2012-10-08 18:32:41 -04:00
user_private_groups.ldif	Move Managed Entries into their own container in the replicated space.	2011-09-12 16:28:27 -04:00
uuid.ldif	DNSSEC: DNS key synchronization daemon	2014-10-21 12:23:03 +02:00
wsgi.py	Tweak the session auth to reflect developer consensus.	2012-02-27 05:54:29 -05:00