freeipa

0 Fork 0

mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2026-10-12 16:32:01 -05:00

Files

T

Rob Crittenden a00b03831b Don't set krbLastPwdChange when setting a host OTP password.

We have no visibility into whether an entry has a keytab or not so
krbLastPwdChange is used as a rough guide.

If this value exists during enrollment then it fails because the host
is considered already joined. This was getting set when a OTP was
added to a host that had already been enrolled (e.g. you enroll a host,
unenroll it, set a OTP, then try to re-enroll). The second enrollment
was failing because the enrollment plugin thought it was still
enrolled becaused krbLastPwdChange was set.

https://fedorahosted.org/freeipa/ticket/1357

2011-07-18 19:34:19 -04:00

ipa_pwd_extop.c

Don't set krbLastPwdChange when setting a host OTP password.

2011-07-18 19:34:19 -04:00

ipapwd_common.c

Don't set krbLastPwdChange when setting a host OTP password.

2011-07-18 19:34:19 -04:00

ipapwd_encoding.c

Fix resource leaks.

2011-03-28 14:50:59 -04:00

ipapwd_prepost.c

Don't set krbLastPwdChange when setting a host OTP password.