Fraser Tweedale dfbdb53238 cert-request: match names against principal aliases ...

Currently we do not check Kerberos principal aliases when validating
a CSR.  Enhance cert-request to accept the following scenarios:

- for hosts and services: CN and SAN dnsNames match a principal
  alias (realm and service name must be same as nominated principal)

- for all principal types: UPN or KRB5PrincipalName othername match
  any principal alias.

Fixes: https://fedorahosted.org/freeipa/ticket/6295
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
Reviewed-By: Milan Kubik <mkubik@redhat.com>

2016-12-06 16:13:45 +01:00

..

advise

ipautil: remove SHARE_DIR and PLUGIN_SHARE_DIR

2016-11-29 14:50:51 +01:00

dnssec

ipapython: move dnssec, p11helper and secrets to ipaserver

2016-11-29 14:50:51 +01:00

install

replica-conncheck: improve error message during replicainstall

2016-12-06 13:05:29 +01:00

plugins

cert-request: match names against principal aliases

2016-12-06 16:13:45 +01:00

secrets

ipapython: move dnssec, p11helper and secrets to ipaserver

2016-11-29 14:50:51 +01:00

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

dcerpc.py

ipautil: remove SHARE_DIR and PLUGIN_SHARE_DIR

2016-11-29 14:50:51 +01:00

dns_data_management.py

Fix compatibility with python-dns 1.15.0

2016-10-11 15:45:41 +02:00

Makefile.am

Build: Makefiles for Python packages

2016-11-09 13:08:32 +01:00

p11helper.py

ipapython: move dnssec, p11helper and secrets to ipaserver

2016-11-29 14:50:51 +01:00

rpcserver.py

ipautil: move kinit functions to ipalib.install

2016-11-29 14:50:51 +01:00

servroles.py

Introduce "NTP server" role

2016-06-15 13:51:48 +02:00

session.py

pylint: enable the import-error check

2016-10-24 14:11:08 +02:00

setup.cfg

Port all setup.py to setuptools

2016-10-20 18:43:37 +02:00

setup.py

Adjustments for setup requirements v2

2016-12-02 09:45:14 +01:00

topology.py

Fix topologysuffix-verify failing connections

2016-06-24 13:32:02 +02:00