Christian Heimes f1c58fb646 Add URI system records for KDC ...

MIT KRB5 1.15 introduced KDC service discovery with URI records.
_kerberos and _kpasswd URI records can provide TCP, UDP, and Kerberos
KDC-Proxy references. URI lookups take precedence over SRV lookups,
falling back to SRV lookups if no URI records are found.

Also reduce TTL for system records from one day to one hour. It allows
users to remove or update discovery entries in a timely fashion.

See: https://web.mit.edu/kerberos/krb5-latest/doc/admin/realm_config.html#kdc-discovery
Fixes: https://pagure.io/freeipa/issue/8968
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>

2021-08-31 18:28:27 -04:00

..

advise

ipa-advise: Define the domain used when looking up ipa-ca

2021-08-03 11:05:15 -04:00

custodia

Also drop Custodia client and forwarder

2021-06-16 10:28:17 -04:00

dnssec

OpenDNSSEC: fix timezone in key creation date

2021-02-04 14:20:59 +01:00

install

Specify PKI installation log paths

2021-08-26 14:07:29 +02:00

plugins

ipatests: Add tests for schema Command

2021-08-19 08:44:26 +02:00

secrets

Remove more unused Custodia code

2021-06-16 10:28:17 -04:00

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

dcerpc_common.py

Py3: Replace six.text_type with str

2018-09-27 16:11:18 +02:00

dcerpc.py

trust-fetch-domains: use custom krb5.conf overlay for all trust operations

2021-01-22 12:21:33 -05:00

dns_data_management.py

Add URI system records for KDC

2021-08-31 18:28:27 -04:00

Makefile.am

Build: Makefiles for Python packages

2016-11-09 13:08:32 +01:00

masters.py

Add hidden replica feature

2019-03-28 17:57:58 +01:00

p11helper.py

Grammar: whitespace is a word

2020-06-23 10:16:29 +02:00

rpcserver.py

rpcserver.py: perf_counter_ns is Python 3.7+

2021-07-01 13:15:48 -04:00

servroles.py

Use api.env.container_sysaccounts

2020-04-28 11:28:29 +02:00

setup.cfg

Port all setup.py to setuptools

2016-10-20 18:43:37 +02:00

setup.py

Also drop Custodia client and forwarder

2021-06-16 10:28:17 -04:00

topology.py

Py3: Remove subclassing from object

2018-09-27 11:49:04 +02:00

wsgi.py

Improve wsgi app loading

2021-04-07 11:43:23 +03:00