freeipa

mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00

Files

Alexander Scheel 3ecea7800a Configure PKI AJP Secret with 256-bit secret

By default, PKI's AJP secret is generated as a 75-bit password. By
generating it in IPA, we can guarantee the strength of the AJP secret.
It makes sense to use a stronger AJP secret because it typically
isn't rotated; access to AJP allows an attacker to impersonate an admin
while talking to PKI.

Fixes: https://pagure.io/freeipa/issue/8372
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1849146
Related: https://bugzilla.redhat.com/show_bug.cgi?id=1845447
Related: https://github.com/dogtagpki/pki/pull/437

Signed-off-by: Alexander Scheel <ascheel@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>

2020-06-23 09:20:24 +02:00

advise

ipa-advise: fallback to /usr/libexec/platform-python if python3 not found

2020-05-05 11:50:01 +02:00

dnssec

opendnssec2.1 support: move all ods tasks to specific file

2020-03-12 21:48:25 +01:00

install

Configure PKI AJP Secret with 256-bit secret

2020-06-23 09:20:24 +02:00

plugins

fix iPAddress cert issuance for >1 host/service