Alexander Bokovoy d228b1bd70 ipa-kdb: Handle parent-child relationship for subdomains ...

When MS-PAC information is re-initialized, record also parent-child
relationship between trust root level domain and its subdomains.

Use parent incoming SID black list to check if child domain is not
allowed to access IPA realm.

We also should really use 'cn' of the entry as domain name.
ipaNTTrustPartner has different meaning on wire, it is an index
pointing to the parent domain of the domain and will be 0 for top
level domains or disjoint subdomains of the trust.

Finally, trustdomain-enable and trustdomain-disable commands should
force MS-PAC cache re-initalization in case of black list change.
Trigger that by asking for cross-realm TGT for HTTP service.

2013-10-04 10:25:31 +02:00

..

ipa-kdb

ipa-kdb: Handle parent-child relationship for subdomains

2013-10-04 10:25:31 +02:00

ipa-otpd

Add the krb5/FreeIPA RADIUS companion daemon

2013-05-17 09:30:51 +02:00

ipa-sam

ipasam: for subdomains pick up defaults for missing values

2013-10-04 10:25:31 +02:00

ipa-slapi-plugins

Ensure credentials structure is initialized

2013-10-02 14:38:13 +02:00

configure.ac

Prevent *.pyo and *.pyc multilib problems

2013-08-13 15:31:46 +02:00

ipa-version.h.in

Fix typos

2011-09-07 13:20:42 +02:00

Makefile.am

Add the krb5/FreeIPA RADIUS companion daemon

2013-05-17 09:30:51 +02:00