freeipa/daemons/ipa-kdb
Simo Sorce 7a20fc671b Allow to specify Kerberos authz data type per user
Like for services setting the ipaKrbAuthzData attribute on a user object will
allow us to control exactly what authz data is allowed for that user.
Setting NONE would allow no authz data, while setting MS-PAC would allow only
Active Directory compatible data.

Signed-off-by: Simo Sorce <simo@redhat.com>

Ticket: https://fedorahosted.org/freeipa/ticket/2579
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
2016-03-09 19:00:43 +01:00
..
tests ipa-kdb: get_authz_data_types() make sure entry can be NULL 2016-01-27 16:03:03 +01:00
ipa_kdb_audit_as.c ipa-kdb: unexpected error code in 'ipa_kdb_audit_as_req' triggers a message 2015-01-30 11:02:16 +01:00
ipa_kdb_common.c Always verify we have a valid ldap context. 2016-01-13 16:09:38 +01:00
ipa_kdb_delegation.c ipa-kdb: fix delegation acl check 2012-02-28 13:03:22 -05:00
ipa_kdb_mkey.c ipa-kdb: Get/Store Master Key directly from LDAP 2011-08-26 08:24:49 -04:00
ipa_kdb_mspac_private.h ipa-kdb: add unit-test for filter_logon_info() 2015-07-08 01:56:52 +02:00
ipa_kdb_mspac.c Allow to specify Kerberos authz data type per user 2016-03-09 19:00:43 +01:00
ipa_kdb_passwords.c Detect default encsalts kadmin password change 2015-05-27 09:45:56 -04:00
ipa_kdb_principals.c Allow admins to disable preauth for SPNs. 2016-03-08 18:48:40 +01:00
ipa_kdb_pwdpolicy.c Detect default encsalts kadmin password change 2015-05-27 09:45:56 -04:00
ipa_kdb.c Allow admins to disable preauth for SPNs. 2016-03-08 18:48:40 +01:00
ipa_kdb.exports ipa-kdb: add exports file 2011-08-26 08:24:49 -04:00
ipa_kdb.h Allow admins to disable preauth for SPNs. 2016-03-08 18:48:40 +01:00
Makefile.am ipa-kdb: convert test to cmocka 2015-07-08 01:56:52 +02:00
README ipa-kdb: Initial plugin skeleton 2011-08-26 08:24:49 -04:00
README.s4u2proxy.txt Fix s4u2proxy README and add warning 2015-06-08 14:37:29 -04:00

This is the ipa krb5kdc database backend.