freeipa.git/daemons/ipa-slapi-plugins/ipa-pwd-extop, branch testotp

Teach ipa-pwd-extop to respect global ipaUserAuthType settings

2014-02-11T12:41:12+00:00

https://fedorahosted.org/freeipa/ticket/4105

Add OTP sync support to ipa-pwd-extop

2014-02-11T12:41:05+00:00

BUILD: Fix portability of NSS in file ipa_pwd.c

2014-01-28T15:35:34+00:00

Tested-by: Timo Aaltonen

Harmonize policy discovery to kdb driver

2014-01-16T08:00:35+00:00

The KDB driver does not walk the tree back like the original password plugin.
Also we do not store the default policy in the base DN as we used to do in the
past anymore.
So doing a full subtree search and walking back the tree is just a waste of
time.
Instead hardcode the default policy like we do in the kdb driver.

Fixes: https://fedorahosted.org/freeipa/ticket/4085

Remove CFLAGS duplication.

2013-12-06T13:44:41+00:00

https://fedorahosted.org/freeipa/ticket/3896

Remove generation and handling of LM hashes

2013-11-01T08:28:35+00:00

https://fedorahosted.org/freeipa/ticket/3795

Remove ipa-pwd-extop and ipa-enrollment duplicate error strings

2013-10-30T16:59:46+00:00

Some error strings were duplicate which makes it then harder to
see what is the real root cause of it.

https://fedorahosted.org/freeipa/ticket/3988

Administrative password change does not respect password policy

2013-10-17T12:04:03+00:00

When Directory Manager or a PassSync agent is changing a password,
it is not being expired, but standard expiration time should apply.
However, default expiration time was always applied (90 days)
even though administrator may have a custom policy for the user.

https://fedorahosted.org/freeipa/ticket/3968

Use the right attribute with ipapwd_entry_checks for MagicRegen

2013-10-08T07:18:57+00:00

There is a special mode to set the ipaNTHash attribute if a RC4 Kerberos
key is available for the corresponding user. This is typically triggered
by samba via the ipa_sam passdb plugin. The principal used by samba to
connect to the IPA directory server has the right to modify ipaNTHash
but no other password attribute. This means that the current check on
the userPassword attribute is too strict for this case and leads to a
failure of the whole operation.

With this patch the access right on ipaNTHash are checked if no other
password operations are requested.

Ensure credentials structure is initialized

2013-10-02T12:38:13+00:00

https://fedorahosted.org/freeipa/ticket/3953