mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-24 16:10:02 -06:00
091e8fac34
There is a special mode to set the ipaNTHash attribute if a RC4 Kerberos key is available for the corresponding user. This is typically triggered by samba via the ipa_sam passdb plugin. The principal used by samba to connect to the IPA directory server has the right to modify ipaNTHash but no other password attribute. This means that the current check on the userPassword attribute is too strict for this case and leads to a failure of the whole operation. With this patch the access right on ipaNTHash are checked if no other password operations are requested. |
||
---|---|---|
.. | ||
common | ||
ipa-cldap | ||
ipa-dns | ||
ipa-enrollment | ||
ipa-extdom-extop | ||
ipa-lockout | ||
ipa-modrdn | ||
ipa-pwd-extop | ||
ipa-range-check | ||
ipa-sidgen | ||
ipa-uuid | ||
ipa-version | ||
ipa-winsync | ||
Makefile.am | ||
README |