freeipa.git/daemons/ipa-sam, branch adwork

Add error condition handling to the SASL bind callback in ipasam

2012-06-27T14:25:45+00:00

https://fedorahosted.org/freeipa/ticket/2877

Support requests for DOMAIN$ account for trusted domains in ipasam module

2012-06-27T14:13:42+00:00

https://fedorahosted.org/freeipa/ticket/2870

ipasam: remove unused struct elements

2012-06-11T10:03:09+00:00

Use exop instead of kadmin.local

2012-06-11T07:40:59+00:00

ipa-sam: update sid_to_id() interface to follow passdb API changes in Samba

2012-06-07T07:39:10+00:00

Commit a6e29f23f09ba5b6b6d362f7683ae8088bc0ba85 in Samba changed id mapping
API in passdb interface to use 'struct unixid'. The change replaced three arguments
(uid, gid, type) by one (struct unixid). As result, ipa-sam became broken.

Without this change ipa-sam introduces stack corruption in Samba post 4.0.0alpha18
leading to corrupted security context stack as well and then crashing in setgroups(3).

Add trust-related ACIs

2012-06-07T07:39:10+00:00

A high-level description of the design and ACIs for trusts is available at
https://www.redhat.com/archives/freeipa-devel/2011-December/msg00224.html
and
https://www.redhat.com/archives/freeipa-devel/2011-December/msg00248.html

Ticket #1731

Add separate attribute to store trusted domain SID

2012-06-07T07:39:09+00:00

We need two attributes in the ipaNTTrustedDomain objectclass to store different
kind of SID. Currently ipaNTSecurityIdentifier is used to store the Domain-SID
of the trusted domain. A second attribute is needed to store the SID for the
trusted domain user. Since it cannot be derived safely from other values and
since it does not make sense to create a separate object for the user a new
attribute is needed.

https://fedorahosted.org/freeipa/ticket/2191

Add a second module init call for newer samba versions

2011-12-09T20:57:49+00:00

Add ipasam samba passdb backend

2011-12-06T13:29:53+00:00

https://fedorahosted.org/freeipa/ticket/1874