freeipa/daemons
Alexander Bokovoy 0da6a57b40 ad trust: accept subordinate domains of the forest trust root
Commit 8b6d1ab854 added support for
subordinate UPN suffixes but missed the case where subordinate UPN is a
subdomain of the forest root domain and not mentioned in the UPN
suffixes list.

Correct this situation by applying the same check to the trusted domain
name as well.

Fixes: https://pagure.io/freeipa/issue/8554
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
2020-11-26 12:00:57 +02:00
..
dnssec ipa-dnskeysyncd: Raise loglevel to DEBUG 2020-08-31 09:42:31 +03:00
ipa-kdb ad trust: accept subordinate domains of the forest trust root 2020-11-26 12:00:57 +02:00
ipa-otpd ipa-otpd: fix gcc complaints in Rawhide 2020-11-17 18:48:24 +02:00
ipa-sam ipa-sam: fix gcc complaints on Rawhide 2020-11-17 18:48:24 +02:00
ipa-slapi-plugins On password reset also set krbLastAdminUnlock to unlock account 2020-11-11 10:29:25 +02:00
ipa-version.h.in Build: move version handling from Makefile to configure 2016-11-09 13:08:32 +01:00
Makefile.am Build: properly integrate ipa-version.h.in into build system 2016-11-29 15:28:24 +01:00