freeipa

mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00

Files

Alexander Bokovoy 749111e6c2 KDC: implement transition check for trusted domains

When client principal requests for a ticket for a server principal
and we have to perform transition, check that all three belong to either
our domain or the domains we trust through forest trusts.

In case all three realms (client, transition, and server) match
trusted domains and our domain, issue permission to transition from client
realm to server realm.

Part of https://fedorahosted.org/freeipa/ticket/3909

2013-10-04 10:25:31 +02:00

tests

Add unit test for get_authz_data_types()

2013-03-08 10:46:00 +01:00

ipa_kdb_audit_as.c

Add support for disabling KDC writes

2012-06-06 22:12:22 -04:00

ipa_kdb_common.c

Use libunistring ulc_casecmp() on unicode strings

2013-07-18 18:08:53 +02:00

ipa_kdb_delegation.c

ipa-kdb: fix delegation acl check

2012-02-28 13:03:22 -05:00

ipa_kdb_mkey.c

ipa-kdb: Get/Store Master Key directly from LDAP

2011-08-26 08:24:49 -04:00

ipa_kdb_mspac.c

KDC: implement transition check for trusted domains

2013-10-04 10:25:31 +02:00

ipa_kdb_passwords.c

Prevent integer overflow when setting krbPasswordExpiration

2013-02-08 15:54:21 +01:00

ipa_kdb_principals.c

kdb-princ: Fix memory leak

2013-08-28 12:42:56 +02:00

ipa_kdb_pwdpolicy.c

Fix failure count interval attribute name in query for password policy.

2012-03-29 00:52:25 -04:00

ipa_kdb.c

KDC: implement transition check for trusted domains

2013-10-04 10:25:31 +02:00

ipa_kdb.exports

ipa-kdb: add exports file

2011-08-26 08:24:49 -04:00

ipa_kdb.h

KDC: implement transition check for trusted domains

2013-10-04 10:25:31 +02:00

Makefile.am

Use libunistring ulc_casecmp() on unicode strings

2013-07-18 18:08:53 +02:00

README

ipa-kdb: Initial plugin skeleton

2011-08-26 08:24:49 -04:00

README.s4u2proxy.txt

ipa-kdb: Add delgation access control support

2011-12-08 17:18:10 -05:00

README

This is the ipa krb5kdc database backend.