IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity
13,357 Commits 11 Branches 60 Tags 60 MiB
Python 75.7%
JavaScript 10.9%
C 10.8%
Roff 1.1%
Makefile 0.4%
Other 1.1%
97a31e69e8
Go to file
Christian Heimes 97a31e69e8 Use default ssh host key algorithms 
ipa-client-install no longer overrides SSH client settings for
HostKeyAlgorithms. It's no longer necessary to configure
HostKeyAlgorithms. The setting was disabling modern algorithms and
enabled a weak algorithm that is blocked in FIPS code.

The ipa-client package removes IPA's custom HostKeyAlgorithm from
/etc/ssh/ssh_config during package update. Non-IPA settings are not
touched.

Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1756432
Fixes: https://pagure.io/freeipa/issue/8082
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
2019-11-12 12:26:49 +01:00
asn1
client
contrib
daemons
doc
init
install
ipaclient Use default ssh host key algorithms 2019-11-12 12:26:49 +01:00
ipalib
ipaplatform
ipapython
ipaserver
ipatests
po
pypi
util
.freeipa-pr-ci.yaml
.git-commit-template
.gitignore
.lgtm.yml
.mailmap
.test_runner_config.yaml
.tox-install.sh
.travis_run_task.sh
.travis.yml
.wheelconstraints.in
ACI.txt
API.txt
autogen.sh
BUILD.txt
CODE_OF_CONDUCT.md
configure.ac
Contributors.txt
COPYING
COPYING.openssl
freeipa.doap.rdf
freeipa.spec.in Use default ssh host key algorithms 2019-11-12 12:26:49 +01:00
ipa.in
ipasetup.py.in
make-doc
make-test
makeaci.in
makeapi.in
Makefile.am
Makefile.python.am
Makefile.pythonscripts.am
makerpms.sh
pylint_plugins.py
pylintrc
README.md
server.m4
tox.ini
VERSION.m4
zanata.xml

README.md

FreeIPA Server

FreeIPA allows Linux administrators to centrally manage identity, authentication and access control aspects of Linux and UNIX systems by providing simple to install and use command line and web based management tools.

FreeIPA is built on top of well known Open Source components and standard protocols with a very strong focus on ease of management and automation of installation and configuration tasks.

FreeIPA can seamlessly integrate into an Active Directory environment via cross-realm Kerberos trust or user synchronization.

Benefits

FreeIPA:

  • Allows all your users to access all the machines with the same credentials and security settings
  • Allows users to access personal files transparently from any machine in an authenticated and secure way
  • Uses an advanced grouping mechanism to restrict network access to services and files only to specific users
  • Allows central management of security mechanisms like passwords, SSH Public Keys, SUDO rules, Keytabs, Access Control Rules
  • Enables delegation of selected administrative tasks to other power users
  • Integrates into Active Directory environments

Components

The FreeIPA project provides unified installation and management tools for the following components:

Project Website

Releases, announcements and other information can be found on the IPA server project page at http://www.freeipa.org/ .

Documentation

The most up-to-date documentation can be found at http://freeipa.org/page/Documentation .

Quick Start

To get started quickly, start here: http://www.freeipa.org/page/Quick_Start_Guide

For developers

Licensing

Please see the file called COPYING.

Contacts