freeipa

mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00

Files

Alexander Bokovoy a1be4fc863 KDB: support external IdP configuration

When IdP configuration is provided, take it into account:

 - idp-specific Kerberos ticket policy would be applied

 - Presence of IdP link in a Kerberos principal entry would cause KDB to
   enable `idp` pre-authentication method on KDC side.

The latter requires additional pre-authentication method supplied with
SSSD 2.7.0.

Fixes: https://pagure.io/freeipa/issue/8804

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Signed-off-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-By: Francisco Trivino <ftrivino@redhat.com>
Reviewed-By: Sumit Bose <sbose@redhat.com>

2022-05-10 15:52:41 +03:00

dnssec

dnssec: concurrency issue when disabling old replica key

2021-03-09 16:52:38 +01:00

ipa-kdb

KDB: support external IdP configuration

2022-05-10 15:52:41 +03:00

ipa-otpd

ipa-otpd: add support for SSSD OIDC helper

2022-05-10 15:52:41 +03:00

ipa-sam

ipa-sam: retrieve trusted domain account credential from the TDO itself