mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-02-25 18:55:28 -06:00
a1be4fc863
When IdP configuration is provided, take it into account: - idp-specific Kerberos ticket policy would be applied - Presence of IdP link in a Kerberos principal entry would cause KDB to enable `idp` pre-authentication method on KDC side. The latter requires additional pre-authentication method supplied with SSSD 2.7.0. Fixes: https://pagure.io/freeipa/issue/8804 Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com> Signed-off-by: Pavel Březina <pbrezina@redhat.com> Reviewed-By: Francisco Trivino <ftrivino@redhat.com> Reviewed-By: Sumit Bose <sbose@redhat.com>
This is the ipa krb5kdc database backend. As the KDB interfaces heavily with krb5, we inherit its code style as well. However, note the following changes: - no modelines (and different file preamble) - return types don't require their own line - single-statement blocks may optionally be braced - /* and */ do not ever get their own line - C99 for-loops are permitted (and encouraged) - a restricted set of other C99 features are permitted In particular, variable-length arrays, flexible array members, compound literals, universal character names, and //-style comments are not permitted. Use of regular malloc/free is preferred over talloc for new code. By and large, existing code mostly conforms to these requirements. New code must conform to them.