Alexander Bokovoy b2c5691e73 Enforce SMBLoris attack protection in default Samba configuration ...

See https://access.redhat.com/security/vulnerabilities/smbloris for
details.

There is no recommended value but for IPA DC we can limit with 1000
concurrent connections from unrelated clients.

Related: https://pagure.io/freeipa/issue/6951
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>

2019-04-24 15:47:19 -04:00

..

plugins

upgrade: upgrade existing trust agreements to new layout

2019-03-28 14:08:19 +01:00

server

Enforce SMBLoris attack protection in default Samba configuration

2019-04-24 15:47:19 -04:00

__init__.py

Remove __all__ specifications in ipaclient and ipaserver.install

2013-09-06 15:42:33 +02:00

adtrust.py

ipaserver.install.adtrust: fix CID 323644

2018-11-07 16:37:18 +01:00

adtrustinstance.py

Set idmap config for Samba to follow IPA ranges and use SSSD

2019-04-24 15:47:19 -04:00

bindinstance.py

Use Network Manager to configure resolv.conf

2019-04-16 10:45:59 +02:00

ca.py

Add pki.ini override option

2019-04-10 13:43:23 +02:00

cainstance.py

Debian: Fix replicatio of light weight sub CAs

2019-04-24 14:08:20 +02:00

certs.py

Py3: Replace six.moves imports

2018-10-05 12:06:19 +02:00

conncheck.py

install: introduce installer class hierarchy

2016-11-11 12:17:25 +01:00

custodiainstance.py

Move realm_to_serverid/ldap_uri to ipaldap

2019-02-05 08:39:13 -05:00

dns.py

Use api.env.container_masters

2019-03-28 00:21:00 +01:00

dnskeysyncinstance.py

Delay enabling services until end of installer

2018-07-06 13:26:43 +02:00

dogtag.py

Verify pki ini override early

2019-04-10 13:43:23 +02:00

dogtaginstance.py

Verify pki ini override early

2019-04-10 13:43:23 +02:00

dsinstance.py

Remove DsInstance.request_service_keytab as it is not needed anymore

2019-04-07 12:26:09 +02:00

httpinstance.py

Debian: Add paths for open-sans and font-awesome

2019-04-24 14:08:20 +02:00

installutils.py

Verify external CA's basic constraint pathlen

2019-04-04 10:05:10 +02:00

ipa_backup.py

Add ExecStartPost hook to wait for Dogtag PKI

2019-04-24 09:09:28 +02:00

ipa_cacert_manage.py

Add support for multiple certificates/formats to ipa-cacert-manage

2018-11-13 10:44:14 +01:00

ipa_crlgen_manage.py

CRL generation master: new utility to enable|disable

2019-03-14 09:39:55 +01:00

ipa_kra_install.py

Add pki.ini override option

2019-04-10 13:43:23 +02:00

ipa_ldap_updater.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

ipa_otptoken_import.py

Py3: Remove subclassing from object

2018-09-27 11:49:04 +02:00

ipa_pkinit_manage.py

PKINIT: fix ipa-pkinit-manage enable|disable

2018-12-05 11:06:21 +01:00

ipa_replica_install.py

Enable replica install info logging to match ipa-server-install

2018-11-01 13:08:58 +01:00

ipa_restore.py

Add tasks.systemd_daemon_reload()

2019-04-02 19:35:38 +02:00

ipa_server_certinstall.py

Move realm_to_serverid/ldap_uri to ipaldap

2019-02-05 08:39:13 -05:00

ipa_server_install.py

Improve console logging for ipa-server-install

2018-06-20 08:38:03 +02:00

ipa_server_upgrade.py

ipa commands: print 'IPA is not configured' when ipa is not setup

2018-08-23 12:08:45 +02:00

ipa_winsync_migrate.py

ipa commands: print 'IPA is not configured' when ipa is not setup

2018-08-23 12:08:45 +02:00

kra.py

Add pki.ini override option

2019-04-10 13:43:23 +02:00

krainstance.py

ipaserver/install/krainstance.py: chown after write

2019-04-11 10:04:00 +02:00

krbinstance.py

Move DS's Kerberos env vars to unit file

2019-04-02 19:35:38 +02:00

ldapupdate.py

Use new LDAPClient constructors

2019-02-05 08:39:13 -05:00

odsexporterinstance.py

Delay enabling services until end of installer

2018-07-06 13:26:43 +02:00

opendnssecinstance.py

Add ODS manager abstraction to ipaplatform

2019-04-24 14:08:20 +02:00

otpdinstance.py

Enable pylint missing-final-newline check

2015-12-23 07:59:22 +01:00

replication.py

Fix wrong evaluation of attributes in check_repl_update

2019-04-15 12:05:22 +02:00

schemaupdate.py

logging: do not use ipa_log_manager to create module-level loggers

2017-07-14 15:55:59 +02:00

service.py

ipa-setup-kra: fix python2 parameter

2019-04-01 12:55:46 +02:00

sysupgrade.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

upgradeinstance.py

Move realm_to_serverid/ldap_uri to ipaldap

2019-02-05 08:39:13 -05:00