freeipa/client
Alexander Bokovoy 3f6656e09a ipa-otpd: add support for SSSD OIDC helper
SSSD OIDC helper is used for negotiating with OAUTH2 or OIDC end points
of external identity providers (IdPs).

ipa-otpd daemon now is capable to take either Issuer URL or individual
endpoints and call SSSD OIDC helper accordingly.

Communication with SSSD OIDC helper can be debugged with the use of a
debug variable set in /etc/ipa/default.conf. Man page for
default.conf(5) has been updated to provide this information.

Fixes: https://pagure.io/freeipa/issue/8805

Signed-off-by: Sumit Bose <sbose@redhat.com>
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Francisco Trivino <ftrivino@redhat.com>
Reviewed-By: Sumit Bose <sbose@redhat.com>
2022-05-10 15:52:41 +03:00
..
man ipa-otpd: add support for SSSD OIDC helper 2022-05-10 15:52:41 +03:00
share EPN: document missing option msg_subject 2022-04-29 13:56:19 -04:00
sysconfig Increase default debug level of certmonger 2019-06-24 10:00:37 +02:00
systemd systemd: enforce en_US.UTF-8 locale in systemd units 2020-12-10 14:38:05 +02:00
certbot-dns-ipa.in dnspython: Add compatibility shim 2020-08-31 09:46:03 +03:00
config.c Fix ressource leak in client/config.c get_config_entry 2018-10-23 16:45:22 +02:00
ipa-certupdate.in Replace PYTHONSHEBANG with valid shebang 2019-06-24 09:35:57 +02:00
ipa-client-automount.in Introduce minimal ipa-client-automount.in and ipactl.in 2019-06-28 10:53:07 +02:00
ipa-client-common.c Split ipa-client/ into ipaclient/ (Python library) and client/ (C, scripts) 2016-01-27 12:09:02 +01:00
ipa-client-common.h ipa-join: switch to jansson for json handling 2020-07-09 14:17:47 +03:00
ipa-client-install.in Replace PYTHONSHEBANG with valid shebang 2019-06-24 09:35:57 +02:00
ipa-client-samba.in ipa-client-samba: a tool to configure Samba domain member on IPA client 2019-06-29 11:00:28 +03:00
ipa-epn.in IPA-EPN: First version. 2020-06-09 08:43:45 +02:00
ipa-getkeytab.c Fix use of comparison functions to avoid GCC bug 95189 2021-11-23 10:31:34 +01:00
ipa-join.c Re-work the quiet option in ipa-join to not suppress errors 2022-02-09 10:48:06 -05:00
ipa-rmkeytab.c ipa-rmkeytab: Check return value of krb5_kt_(start|end)_seq_get 2021-01-15 14:06:53 +01:00
Makefile.am ipa-getkeytab: add option to discover servers using DNS SRV 2021-07-30 08:45:08 -04:00
version.m4.in Split ipa-client/ into ipaclient/ (Python library) and client/ (C, scripts) 2016-01-27 12:09:02 +01:00