mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-28 18:01:23 -06:00
9cc0754b71
Kerberos ticket policy can update policy in a user entry. This allowed set/addattr to be used to modify attributes outside of the ticket policy perview, also bypassing all validation/normalization. Likewise the ticket policy was updatable by the user plugin bypassing all validation. Add two new LDAPObject values to control this behavior: limit_object_classes: only attributes in these are allowed disallow_object_classes: attributes in these are disallowed By default both of these lists are empty so are skipped. ticket 744 |
||
---|---|---|
.. | ||
plugins | ||
__init__.py | ||
aci.py | ||
backend.py | ||
base.py | ||
cli.py | ||
compat.py | ||
config.py | ||
constants.py | ||
crud.py | ||
encoder.py | ||
errors.py | ||
frontend.py | ||
output.py | ||
parameters.py | ||
pkcs10.py | ||
plugable.py | ||
request.py | ||
rpc.py | ||
text.py | ||
util.py | ||
x509.py |