freeipa.git/daemons/ipa-slapi-plugins/ipa-pwd-extop, branch platform

Fix typos

2011-09-07T11:21:06+00:00

Fix "The the" and "classses" in FreeIPA code and messages.

https://fedorahosted.org/freeipa/ticket/1480

Don't set the password expiration to the current time

2011-08-01T01:00:45+00:00

This fixes a regression in the previous patch in ticket #1526.

When setting a host password don't set krbPasswordExpiration.

2011-07-29T08:27:15+00:00

This can cause problems if a host is enrolled, unenrolled and a password
set. The password will be marked as expired like all new passwords are.

https://fedorahosted.org/freeipa/ticket/1526

Don't set krbLastPwdChange when setting a host OTP password.

2011-07-18T23:34:19+00:00

We have no visibility into whether an entry has a keytab or not so
krbLastPwdChange is used as a rough guide.

If this value exists during enrollment then it fails because the host
is considered already joined. This was getting set when a OTP was
added to a host that had already been enrolled (e.g. you enroll a host,
unenroll it, set a OTP, then try to re-enroll). The second enrollment
was failing because the enrollment plugin thought it was still
enrolled becaused krbLastPwdChange was set.

https://fedorahosted.org/freeipa/ticket/1357

Reset failed login count to 0 when admin resets password.

2011-07-13T08:46:22+00:00

https://fedorahosted.org/freeipa/ticket/1441

Fix issues found by Coverity.

2011-05-09T20:23:40+00:00

tickets 1166, 1167, 1168, 1169

Fix resource leaks.

2011-03-28T18:50:59+00:00

Fixes: https://fedorahosted.org/freeipa/ticket/1119

Fix uninitialized variable.

2011-03-24T19:20:03+00:00

https://fedorahosted.org/freeipa/ticket/1118

Fix duplicate OIDs

2011-02-17T13:38:53+00:00

Apparently we forgot to check OID consistency between the schema and the
extensions, and we got duplicates.

Technically the schema was done later but it is easier to change the extensions
OIDs than to change the schema of current beta2/rc1 installations.

The only side effect is that older ipa-getkeytab and ipa-join binaries will
fail. So all the admin/client tools must be upgraded at the same time as well
as all the masters (otherwise some will show/accept the new OID while others
won't).

Fixes: https://fedorahosted.org/freeipa/ticket/976

Let 389-ds start up even if Kerboros is not configured yet.

2011-02-14T19:07:17+00:00

The situation is if during installation /etc/krb5.conf either doesn't
exist or configures no realms then 389-ds won't start up at all, causing
the installation to fail. This will let the server start up in a degraded
mode.

Also need to make the sub_dict in ldapupdate.py handle no realm otherwise
the installation will abort enabling the compat plugin.

ticket 606