freeipa

0 Fork 0

mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2026-10-25 22:50:12 -05:00

Files

T

Alexander Bokovoy f12c4ed600 ipa-otpd: do not pass OIDC client secret if there is none to pass

If there is no client secret specified for the OIDC client, don't push
it to oidc_child via stdin. oidc_child does only expect client secret if
--client-secret-stdin option was specified and we already specify it
only if client secret is not empty.

In addition, if client secret is empty (it is a public OIDC client),
then strlen(NULL) would crash in glibc internals. Avoid that!

Fixes: https://pagure.io/freeipa/issue/9734

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>

2025-01-21 17:23:13 +01:00

dnssec

pylint: remove useless suppression

2023-01-10 08:30:58 +01:00

ipa-kdb

Do not let user with an expired OTP token to log in if only OTP is allowed

2024-10-09 09:48:16 +02:00

ipa-otpd

ipa-otpd: do not pass OIDC client secret if there is none to pass

2025-01-21 17:23:13 +01:00

ipa-sam

ipasam: make krbtgt TDO principal canonical