Christian Heimes a36556e106 Allow insecure binds for migration ...

Commit 5be9341fba disallowed simple bind
over an insecure connection. Password logins were only allowed over LDAPS
or LDAP+STARTTLS. The restriction broke 'ipa migrate-ds' in some cases.

This commit lifts the restriction and permits insecure binds over plain
LDAP. It also makes the migrate-ds plugin use STARTTLS when a CA
certificate is configured with a plain LDAP connection.

Fixes: https://pagure.io/freeipa/issue/8040
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Thomas Woerner <twoerner@redhat.com>

2019-08-13 18:43:58 +02:00

..

advise

Add install/remove package helpers to advise

2018-12-11 13:46:52 +01:00

dnssec

Add ODS manager abstraction to ipaplatform

2019-04-24 14:08:20 +02:00

install

Don't move keys when key backup is disabled

2019-08-13 11:30:18 +02:00

plugins

Allow insecure binds for migration

2019-08-13 18:43:58 +02:00

secrets

Fix CustodiaClient ccache handling

2019-06-18 10:36:24 +10:00

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

dcerpc_common.py

Py3: Replace six.text_type with str

2018-09-27 16:11:18 +02:00

dcerpc.py

Use new LDAPClient constructors

2019-02-05 08:39:13 -05:00

dns_data_management.py

Py3: Remove subclassing from object

2018-09-27 11:49:04 +02:00

Makefile.am

Build: Makefiles for Python packages

2016-11-09 13:08:32 +01:00

masters.py

Add hidden replica feature

2019-03-28 17:57:58 +01:00

p11helper.py

Add PKCS#11 module name to p11helper errors

2019-07-25 15:16:33 -04:00

rpcserver.py

Py3: Replace six.moves imports

2018-10-05 12:06:19 +02:00

servroles.py

Consider configured servers as valid

2019-04-29 16:51:40 +02:00

setup.cfg

Port all setup.py to setuptools

2016-10-20 18:43:37 +02:00

setup.py

Move Custodia secrets handler to scripts

2019-04-26 12:09:22 +02:00

topology.py

Py3: Remove subclassing from object

2018-09-27 11:49:04 +02:00