Alexander Bokovoy ed3dddab87 AD trust: improve trust validation ...

Trust validation requires AD DC to contact IPA server to verify that trust account
actually works. It can fail due to DNS or firewall issue or if AD DC was able to
resolve IPA master(s) via SRV records, it still may contact a replica that has
no trust data replicated yet.

In case AD DC still returns 'access denied', wait 5 seconds and try validation again.
Repeat validation until we hit a limit of 10 attempts, at which point raise
exception telling what's happening.

https://fedorahosted.org/freeipa/ticket/4764

Reviewed-By: Tomas Babej <tbabej@redhat.com>

2014-11-25 12:23:17 +01:00

..

advise

ipa tool: Print the name of the server we are connecting to with -v

2014-02-05 15:35:36 +01:00

install

Fix detection of encoding in zonemgr option

2014-11-24 13:20:35 +00:00

plugins

dogtag plugin: Don't use doctest syntax for non-doctest examples

2014-11-21 12:14:44 +01:00

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

dcerpc.py

AD trust: improve trust validation

2014-11-25 12:23:17 +01:00

rpcserver.py

Fix login password expiration detection with OTP

2014-07-21 16:36:28 +02:00