IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2024-12-25 08:21:05 -06:00
Code Issues Packages Projects Releases Wiki Activity
bb75f5a583
freeipa/daemons/ipa-kdb
History
Alexander Bokovoy bb75f5a583 adtrust: support UPNs for trusted domain users 
Add support for additional user name principal suffixes from
trusted Active Directory forests. UPN suffixes are property
of the forest and as such are associated with the forest root
domain.

FreeIPA stores UPN suffixes as ipaNTAdditionalSuffixes multi-valued
attribute of ipaNTTrustedDomain object class.

In order to look up UPN suffixes, netr_DsRGetForestTrustInformation
LSA RPC call is used instead of netr_DsrEnumerateDomainTrusts.

For more details on UPN and naming in Active Directory see
https://technet.microsoft.com/en-us/library/cc739093%28v=ws.10%29.aspx

https://fedorahosted.org/freeipa/ticket/5354

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
2016-06-11 17:25:50 +02:00
..
tests ipa-kdb: get_authz_data_types() make sure entry can be NULL 2016-01-27 16:03:03 +01:00
ipa_kdb_audit_as.c ipa-kdb: unexpected error code in 'ipa_kdb_audit_as_req' triggers a message 2015-01-30 11:02:16 +01:00
ipa_kdb_common.c Always verify we have a valid ldap context. 2016-01-13 16:09:38 +01:00
ipa_kdb_delegation.c ipa-kdb: fix delegation acl check 2012-02-28 13:03:22 -05:00
ipa_kdb_mkey.c ipa-kdb: Get/Store Master Key directly from LDAP 2011-08-26 08:24:49 -04:00
ipa_kdb_mspac_private.h adtrust: support UPNs for trusted domain users 2016-06-11 17:25:50 +02:00
ipa_kdb_mspac.c adtrust: support UPNs for trusted domain users 2016-06-11 17:25:50 +02:00
ipa_kdb_passwords.c Detect default encsalts kadmin password change 2015-05-27 09:45:56 -04:00
ipa_kdb_principals.c Enable authentication indicators for OTP and RADIUS 2016-05-26 18:47:05 +02:00
ipa_kdb_pwdpolicy.c Detect default encsalts kadmin password change 2015-05-27 09:45:56 -04:00
ipa_kdb.c Allow admins to disable preauth for SPNs. 2016-03-08 18:48:40 +01:00
ipa_kdb.exports ipa-kdb: add exports file 2011-08-26 08:24:49 -04:00
ipa_kdb.h Allow admins to disable preauth for SPNs. 2016-03-08 18:48:40 +01:00
Makefile.am ipa-kdb: convert test to cmocka 2015-07-08 01:56:52 +02:00
README ipa-kdb: Initial plugin skeleton 2011-08-26 08:24:49 -04:00
README.s4u2proxy.txt Fix s4u2proxy README and add warning 2015-06-08 14:37:29 -04:00

README 

This is the ipa krb5kdc database backend.