freeipa/daemons/ipa-slapi-plugins/ipa-pwd-extop
Martin Kosek c41b782bc5 Revert "Check for password expiration in pre-bind"
This reverts commit bfdbd3b6ad.

Forceful validation of password expiration date in a BIND pre-callback
breaks LDAP password change extended operation as the password change
is only allowed via authenticated (bound) channel. Passwords could be
only changed via kadmin protocol. This change would thus break
LDAP-only clients and Web UI password change hook.

This patch will need to be revisited so that unauthenicated corner
cases are also revisited.

https://fedorahosted.org/freeipa/ticket/1539
2014-06-10 08:42:03 +02:00
..
authcfg.c Teach ipa-pwd-extop to respect global ipaUserAuthType settings 2014-02-21 10:26:02 +01:00
authcfg.h Teach ipa-pwd-extop to respect global ipaUserAuthType settings 2014-02-21 10:26:02 +01:00
common.c Teach ipa-pwd-extop to respect global ipaUserAuthType settings 2014-02-21 10:26:02 +01:00
encoding.c Remove generation and handling of LM hashes 2013-11-01 09:28:35 +01:00
ipa_pwd_extop.c Teach ipa-pwd-extop to respect global ipaUserAuthType settings 2014-02-21 10:26:02 +01:00
ipapwd.h Teach ipa-pwd-extop to respect global ipaUserAuthType settings 2014-02-21 10:26:02 +01:00
Makefile.am Teach ipa-pwd-extop to respect global ipaUserAuthType settings 2014-02-21 10:26:02 +01:00
prepost.c Revert "Check for password expiration in pre-bind" 2014-06-10 08:42:03 +02:00
pwd-extop-conf.ldif Enable transactions by default, make password and modrdn TXN-aware 2012-11-21 14:55:12 +01:00
README Mass tree reorganization for IPAv2. To view previous history of files use: 2009-02-03 15:27:14 -05:00
syncreq.c Add OTP sync support to ipa-pwd-extop 2014-02-21 10:26:02 +01:00
syncreq.h Add OTP sync support to ipa-pwd-extop 2014-02-21 10:26:02 +01:00