freeipa/daemons/ipa-kdb
Alexander Bokovoy 0da6a57b40 ad trust: accept subordinate domains of the forest trust root
Commit 8b6d1ab854 added support for
subordinate UPN suffixes but missed the case where subordinate UPN is a
subdomain of the forest root domain and not mentioned in the UPN
suffixes list.

Correct this situation by applying the same check to the trusted domain
name as well.

Fixes: https://pagure.io/freeipa/issue/8554
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
2020-11-26 12:00:57 +02:00
..
tests ipa-kdb: fix gcc complaints in kdb tests 2020-11-17 18:48:24 +02:00
ipa_kdb_audit_as.c kdb: make sure audit_as_req callback signature change is preserved 2020-02-17 16:03:11 +02:00
ipa_kdb_certauth.c Handle the removal of KRB5_KDB_FLAG_ALIAS_OK 2020-01-31 14:36:31 +01:00
ipa_kdb_common.c ipa-kdb: reduce LDAP operations timeout to 30 seconds 2018-11-16 16:54:38 -05:00
ipa_kdb_delegation.c ipa-kdb: fix delegation acl check 2012-02-28 13:03:22 -05:00
ipa_kdb_kdcpolicy.c ipa-kdb: implement AS-REQ lifetime jitter 2020-11-17 14:27:28 +02:00
ipa_kdb_mkey.c ipa-kdb: Get/Store Master Key directly from LDAP 2011-08-26 08:24:49 -04:00
ipa_kdb_mspac_private.h ipa-kdb: support subordinate/superior UPN suffixes 2020-10-26 15:55:02 -04:00
ipa_kdb_mspac.c ad trust: accept subordinate domains of the forest trust root 2020-11-26 12:00:57 +02:00
ipa_kdb_passwords.c Pass the user to the password policy check in the kdb driver 2020-10-23 09:32:52 -04:00
ipa_kdb_principals.c Pass the user to the password policy check in the kdb driver 2020-10-23 09:32:52 -04:00
ipa_kdb_pwdpolicy.c Pass the user to the password policy check in the kdb driver 2020-10-23 09:32:52 -04:00
ipa_kdb.c Easier to use ipa_gethostfqdn() 2020-10-26 17:11:19 +11:00
ipa_kdb.exports Add a skeleton kdcpolicy plugin 2019-09-10 12:33:21 +03:00
ipa_kdb.h Easier to use ipa_gethostfqdn() 2020-10-26 17:11:19 +11:00
ipa-print-pac.c ipa-print-pac: acquire and print PAC record for a user 2020-05-27 17:57:39 +03:00
Makefile.am ipa-kdb: fix gcc complaints in kdb tests 2020-11-17 18:48:24 +02:00
README Make the coding style explicit 2020-01-15 10:00:08 +01:00
README.s4u2proxy.txt Fix s4u2proxy README and add warning 2015-06-08 14:37:29 -04:00

This is the ipa krb5kdc database backend.

As the KDB interfaces heavily with krb5, we inherit its code style as well.
However, note the following changes:

- no modelines (and different file preamble)
- return types don't require their own line
- single-statement blocks may optionally be braced
- /* and */ do not ever get their own line
- C99 for-loops are permitted (and encouraged)
- a restricted set of other C99 features are permitted

In particular, variable-length arrays, flexible array members, compound
literals, universal character names, and //-style comments are not permitted.

Use of regular malloc/free is preferred over talloc for new code.

By and large, existing code mostly conforms to these requirements.  New code
must conform to them.