freeipa.git/daemons, branch master FreeIPA project ipa-kdb: Fix legacy password hashes generation 2011-10-06T16:15:05+00:00 Simo Sorce ssorce@redhat.com 2011-09-19T19:53:17+00:00 f28ab8351f8972b5b5354dd98ba6508eab06dc31 We were not searching for objectclass so the test to se if a user had the posixAccount attribute was failing and the user was not marked as ipa_user. This in turn caused us to not synchronize legacy hashes by not trying to store the userPassword attribute. Fixes: https://fedorahosted.org/freeipa/ticket/1820 
We were not searching for objectclass so the test to se if a user had the
posixAccount attribute was failing and the user was not marked as ipa_user.
This in turn caused us to not synchronize legacy hashes by not trying to store
the userPassword attribute.

Fixes: https://fedorahosted.org/freeipa/ticket/1820
ipa-pwd-extop: allow password change on all connections with SSF>1 2011-10-05T15:20:13+00:00 Sumit Bose sbose@redhat.com 2011-09-27T08:06:50+00:00 3fb40170cb70a87515ec9d3466099fa3417a4086 Instead of checking the individual SSFs for SASL, SSL/TLS and LDAPI connection the global SSF is checked for password changes and enrollments. https://fedorahosted.org/freeipa/ticket/1877 
Instead of checking the individual SSFs for SASL, SSL/TLS and LDAPI connection
the global SSF is checked for password changes and enrollments.

https://fedorahosted.org/freeipa/ticket/1877
ipa-kdb: Fix expiration time calculation 2011-09-26T08:07:11+00:00 Simo Sorce ssorce@redhat.com 2011-09-23T22:37:42+00:00 dfc704de25bbf60062361c4a7d41971a77e5c9a4 Expiration time should be enforced as per policy only for users and only when a password change occurs, ina ll other cases we should just let kadmin decide whther it is going to set a password expiration time or just leave it empty. In general service tickts have strong random passwords so they do not need a password policy or expiration at all. https://fedorahosted.org/freeipa/ticket/1839 
Expiration time should be enforced as per policy only for users and only when a
password change occurs, ina ll other cases we should just let kadmin decide
whther it is going to set a password expiration time or just leave it empty.

In general service tickts have strong random passwords so they do not need a
password policy or expiration at all.

https://fedorahosted.org/freeipa/ticket/1839
ipa-pwd-extop: Enforce old password checks 2011-09-21T22:10:34+00:00 Simo Sorce ssorce@redhat.com 2011-09-16T18:18:38+00:00 c981627016e0d3c0002214c1d2cc0812a480339a If a user is changing his own password, then require the old password to be sent for validation purposes. https://fedorahosted.org/freeipa/ticket/1814 
If a user is changing his own password, then require the old password to be
sent for validation purposes.

https://fedorahosted.org/freeipa/ticket/1814
include <stdint.h> for uintptr_t 2011-09-22T13:42:11+00:00 Marko Myllynen myllynen@redhat.com 2011-09-21T12:03:55+00:00 45aa80195204329c1fb6f0fd1c8e8142618da604 






ipa-pwd-extop: Fix segfault in password change.
2011-09-21T20:05:02+00:00

Simo Sorce
ssorce@redhat.com

2011-09-16T15:42:18+00:00

37836a2e6c07550d504a1075ea5626f160f13342

Do not pass an empty buffer to ber_init() as it will assert.
Check before hand and return an error.





Do not pass an empty buffer to ber_init() as it will assert.
Check before hand and return an error.







ipa-kdb: Properly set password expiration time.
2011-09-19T16:28:35+00:00

Simo Sorce
ssorce@redhat.com

2011-09-17T19:08:06+00:00

4167ad01d73b0c7c0912bf537730da5c9b46b2c3

We do the policy check so we are the only one that can calculate the new
pwd espiration time.

Fixes: https://fedorahosted.org/freeipa/ticket/1793





We do the policy check so we are the only one that can calculate the new
pwd espiration time.

Fixes: https://fedorahosted.org/freeipa/ticket/1793







The precendence on the modrdn plugin was set in the wrong location.
2011-09-13T15:36:59+00:00

Rob Crittenden
rcritten@redhat.com

2011-09-12T14:36:56+00:00

5371c03c93ddc73ebafc4107e7340ac911e27ed5

https://fedorahosted.org/freeipa/ticket/1370





https://fedorahosted.org/freeipa/ticket/1370







Fix typos
2011-09-07T11:20:42+00:00

Yuri Chornoivan
yurchor@ukr.net

2011-09-05T14:30:05+00:00

1785d0a7c1fb5d90945e187b2e94fddf95ead13a

Fix "The the" and "classses" in FreeIPA code and messages.

https://fedorahosted.org/freeipa/ticket/1480





Fix "The the" and "classses" in FreeIPA code and messages.

https://fedorahosted.org/freeipa/ticket/1480







daemons: Remove ipa_kpasswd
2011-08-26T12:26:08+00:00

Simo Sorce
ssorce@redhat.com

2011-07-20T22:11:05+00:00

dfa944da247f71f4ccf8a18eee30459e6c25caa5

Now that we have our own database we can properly enforce stricter constraints
on how the db can be changed. Stop shipping our own kpasswd daemon and instead
use the regular kadmin daemon.





Now that we have our own database we can properly enforce stricter constraints
on how the db can be changed. Stop shipping our own kpasswd daemon and instead
use the regular kadmin daemon.