freeipa.git/daemons/ipa-kdb, branch master

ipa-kdb: Fix legacy password hashes generation

2011-10-06T16:15:05+00:00

We were not searching for objectclass so the test to se if a user had the
posixAccount attribute was failing and the user was not marked as ipa_user.
This in turn caused us to not synchronize legacy hashes by not trying to store
the userPassword attribute.

Fixes: https://fedorahosted.org/freeipa/ticket/1820

ipa-kdb: Fix expiration time calculation

2011-09-26T08:07:11+00:00

Expiration time should be enforced as per policy only for users and only when a
password change occurs, ina ll other cases we should just let kadmin decide
whther it is going to set a password expiration time or just leave it empty.

In general service tickts have strong random passwords so they do not need a
password policy or expiration at all.

https://fedorahosted.org/freeipa/ticket/1839

ipa-kdb: Properly set password expiration time.

2011-09-19T16:28:35+00:00

We do the policy check so we are the only one that can calculate the new
pwd espiration time.

Fixes: https://fedorahosted.org/freeipa/ticket/1793

ipa-kdb: Be flexible

2011-08-26T12:24:50+00:00

Although the proper values for booleans from LDAP should be only uppercase,
389ds does allow wrong cased values without complaining. And we still have some
places where the wrong case is used.
Avoid getting frustrating errors when reading these values out.

ipa-kdb: add password policy support

2011-08-26T12:24:50+00:00

Use default policy for new principals created by kadmin

ipa-kdb: implement change_pwd function

2011-08-26T12:24:49+00:00

ipa-kdb: implement function to retrieve password policies

2011-08-26T12:24:49+00:00

ipa-kdb: Get/Store Master Key directly from LDAP

2011-08-26T12:24:49+00:00

ipa-kdb: add functions to change principals

2011-08-26T12:24:49+00:00

ipa-kdb: add function to iterate over principals

2011-08-26T12:24:49+00:00