freeipa/daemons
Sumit Bose 091e8fac34 Use the right attribute with ipapwd_entry_checks for MagicRegen
There is a special mode to set the ipaNTHash attribute if a RC4 Kerberos
key is available for the corresponding user. This is typically triggered
by samba via the ipa_sam passdb plugin. The principal used by samba to
connect to the IPA directory server has the right to modify ipaNTHash
but no other password attribute. This means that the current check on
the userPassword attribute is too strict for this case and leads to a
failure of the whole operation.

With this patch the access right on ipaNTHash are checked if no other
password operations are requested.
2013-10-08 09:18:57 +02:00
..
ipa-kdb ipa-kdb: Handle parent-child relationship for subdomains 2013-10-04 10:25:31 +02:00
ipa-otpd Add the krb5/FreeIPA RADIUS companion daemon 2013-05-17 09:30:51 +02:00
ipa-sam ipasam: for subdomains pick up defaults for missing values 2013-10-04 10:25:31 +02:00
ipa-slapi-plugins Use the right attribute with ipapwd_entry_checks for MagicRegen 2013-10-08 09:18:57 +02:00
configure.ac Prevent *.pyo and *.pyc multilib problems 2013-08-13 15:31:46 +02:00
ipa-version.h.in Fix typos 2011-09-07 13:20:42 +02:00
Makefile.am Add the krb5/FreeIPA RADIUS companion daemon 2013-05-17 09:30:51 +02:00