Alexander Bokovoy d38dd2680f KRB instance: make provision to work with crypto policy without SHA-1 HMAC types ... RHEL 9 system-wide crypto policies aim at eventual removal of SHA-1 use. Due to bootstrapping process, force explicitly supported encryption types in kdc.conf or we may end up with AES128-SHA1 and AES256-SHA2 only in FIPS mode at bootstrap time which then fails to initialize kadmin principals requiring use of AES256-SHA2 and AES128-SHA2. Camellia ciphers must be filtered out in FIPS mode, we do that already in the kerberos.ldif. At this point we are not changing the master key encryption type to AES256-SHA2 because upgrading existing deployments is complicated and at the time when a replica configuration is deployed, we don't know what is the encryption type of the master key of the original server as well. Fixes: https://pagure.io/freeipa/issue/9119 Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com> Reviewed-By: Julien Rische <jrische@redhat.com> Reviewed-By: Francisco Trivino <ftrivino@redhat.com>		2022-03-08 12:54:47 +01:00
..
advise	ipa-advise: Define the domain used when looking up ipa-ca	2021-08-03 11:05:15 -04:00
custodia	Also drop Custodia client and forwarder	2021-06-16 10:28:17 -04:00
dnssec	freeipa.spec: depend on bind-dnssec-utils	2021-11-25 16:49:00 +01:00
install	KRB instance: make provision to work with crypto policy without SHA-1 HMAC types	2022-03-08 12:54:47 +01:00
plugins	OpenLDAP 2.6+: use only -H option to specify LDAP url	2022-02-07 10:35:27 +02:00
secrets	Custodia: use a stronger encryption algo when exporting keys	2022-01-31 10:08:43 +01:00
__init__.py	Change FreeIPA license to GPLv3+	2010-12-20 17:19:53 -05:00
dcerpc_common.py	Py3: Replace six.text_type with str	2018-09-27 16:11:18 +02:00
dcerpc.py	trust-fetch-domains: use custom krb5.conf overlay for all trust operations	2021-01-22 12:21:33 -05:00
dns_data_management.py	Add URI system records for KDC	2021-08-31 18:28:27 -04:00
Makefile.am	Build: Makefiles for Python packages	2016-11-09 13:08:32 +01:00
masters.py	Add hidden replica feature	2019-03-28 17:57:58 +01:00
p11helper.py	Grammar: whitespace is a word	2020-06-23 10:16:29 +02:00
rpcserver.py	ipa config: add --enable-sid option	2021-11-02 10:11:28 +01:00
servroles.py	Use api.env.container_sysaccounts	2020-04-28 11:28:29 +02:00
setup.cfg	Port all setup.py to setuptools	2016-10-20 18:43:37 +02:00
setup.py	Also drop Custodia client and forwarder	2021-06-16 10:28:17 -04:00
topology.py	Py3: Remove subclassing from object	2018-09-27 11:49:04 +02:00
wsgi.py	Improve wsgi app loading	2021-04-07 11:43:23 +03:00