freeipa/daemons
Alexander Bokovoy 73f33569c8 ipa-kdb: search for password policies globally
With the CoS templates now used to create additional password policies
per object type that are placed under the object subtrees, DAL driver
needs to search for the policies in the whole tree.

Individual policies referenced by the krbPwdPolicyReference attribute
are always searched by their full DN and with the base scope. However,
when KDC asks a DAL driver to return a password policy by name, we don't
have any specific base to search. The original code did search by the
realm subtree.

Fixes https://fedorahosted.org/freeipa/ticket/6561

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
2016-12-15 17:32:33 +01:00
..
dnssec Set explicit confdir option for global contexts 2016-12-02 09:14:35 +01:00
ipa-kdb ipa-kdb: search for password policies globally 2016-12-15 17:32:33 +01:00
ipa-otpd Add main guards to a couple of Python scripts 2016-11-24 16:35:43 +01:00
ipa-sam Build: remove incorrect use of MAINTAINERCLEANFILES 2016-11-16 09:12:07 +01:00
ipa-slapi-plugins IPA Allows Password Reuse with History value defined when admin resets the password. 2016-11-24 17:01:02 +01:00
ipa-version.h.in Build: move version handling from Makefile to configure 2016-11-09 13:08:32 +01:00
Makefile.am Build: properly integrate ipa-version.h.in into build system 2016-11-29 15:28:24 +01:00