freeipa.git - FreeIPA project

	Commit message (Collapse)	Author	Age	Files	Lines
*	Update kerberos password policy values on LDAP binds.	Rob Crittenden	2011-01-21	1	-0/+1
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	On a failed bind this will update krbLoginFailedCount and krbLastFailedAuth and will potentially fail the bind altogether. On a successful bind it will zero krbLoginFailedCount and set krbLastSuccessfulAuth. This will also enforce locked-out accounts. See http://k5wiki.kerberos.org/wiki/Projects/Lockout for details on kerberos lockout. ticket 343
*	Mozldap-specific code removed	Martin Kosek	2011-01-14	1	-9/+4
\| \| \| \| \| \| \| \|	Mozldap code removed from all sources and configure source script. Now, IPA will compile even when package mozldap-devel is not installed on the system. https://fedorahosted.org/freeipa/ticket/756
*	Drop dependency on mozldap	Rob Crittenden	2011-01-12	1	-7/+0
\|
*	Do not use LDAP_DEPRECATED in plugins	Jakub Hrozek	2011-01-07	1	-0/+2
\| \| \| \| \| \| \| \| \|	Remove the LDAP_DEPRECATED constant and do not use functions that are marked as deprecated in recent OpenLDAP releases. Also always define WITH_{MOZLDAP,OPENLDAP} since there are conditional header includes that depend on that constant. https://fedorahosted.org/freeipa/ticket/576
*	Make use of mozldap vs openldap for plugins selectable	Simo Sorce	2010-12-06	1	-4/+17
\|
*	build tweaks - use automake's foreign mode, avoid creating empty files to ↵	Nalin Dahyabhai	2010-11-29	1	-1/+1
\| \| \| \|	satisfy gnu mode - run autoreconf -f to ensure that everything matches
*	Stricter compilation flags	Jakub Hrozek	2010-11-22	1	-0/+2
\| \| \| \| \| \| \|	Use a little stricter compilation flags, in particular -Wall and treat implicit function declarations as errors. Signed-off-by: Simo Sorce <ssorce@redhat.com>
*	uuid plugin: convert the plugin to use the libuuid library	Simo Sorce	2010-11-15	1	-0/+8
\| \| \| \| \| \| \| \| \| \|	The DS guys decided not to expose the DS inetrnal functions used to generate UUIDs for DS. This means the interface is not guaranteed to be available. Switch the ipa_uuid plugin to use the system libuuid plugin instead. NOTE: This causes once again a change in the tring format used for UUIDs. fixes: https://fedorahosted.org/freeipa/ticket/465
*	Add new plugin used to modify related attributes after a modrdn operation.	Simo Sorce	2010-10-28	1	-0/+1
\|
*	Error out when configure finds missing dependencies	Rob Crittenden	2010-10-26	1	-1/+2
\| \| \| \|	ticket 315
*	ipa-uuid: DNA-like plugin that generates uuids	Simo Sorce	2010-10-22	1	-0/+1
\|
*	Remove ipa-memberof, memberof plugin is now included in 389 DS	Simo Sorce	2010-10-15	1	-1/+0
\|
*	Always detect openldap and mozldap at the same time	Simo Sorce	2010-10-07	1	-42/+32
\| \| \| \| \| \|	Slapi plugins must use mozldap because 389 ds is compiled against that. ipa_kpasswd, instead, should be linked against openldap. So always make sure both are available.
*	Fix for include problems relating to NSS3, NSPR4 and SVRCORE	Rob Crittenden	2010-09-16	1	-6/+25
\| \| \| \| \| \| \|	This addresses some problems trying to build on non-Fedora/RHEL distributions, notably Gentoo and Ubuntu/Debian. Patch contributed by Ian Kumlien <pomac@vapor.com>
*	Enforce existence of 389-ds header files.	Rob Crittenden	2010-08-06	1	-0/+7
\| \| \| \|	ticket #82
*	Replication version checking.	Rob Crittenden	2010-06-24	1	-0/+1
\| \| \| \| \| \| \| \|	Whenever we upgrade IPA such that any data incompatibilities might occur then we need to bump the DATA_VERSION value so that data will not replicate to other servers. The idea is that you can do an in-place upgrade of each IPA server and the different versions own't pollute each other with bad data.
*	Enrollment for a host in an IPA domain	Rob Crittenden	2009-09-24	1	-0/+1
\| \| \| \| \| \| \| \| \| \| \| \|	This will create a host service principal and may create a host entry (for admins). A keytab will be generated, by default in /etc/krb5.keytab If no kerberos credentails are available then enrollment over LDAPS is used if a password is provided. This change requires that openldap be used as our C LDAP client. It is much easier to do SSL using openldap than mozldap (no certdb required). Otherwise we'd have to write a slew of extra code to create a temporary cert database, import the CA cert, ...
*	Remove our copy of the DNA plugin and use the one that comes with DS.	Rob Crittenden	2009-03-06	1	-1/+0
\| \| \| \| \|	The DS plugin does config checking when adding new entries online so we are dropping the Posix subtree.
*	Minor cleanup of configure.ac	Rob Crittenden	2009-02-05	1	-1/+0
\|
*	Get merged tree into an installalble state.	Rob Crittenden	2009-02-03	1	-0/+291
	I have only tested the all, rpms and *clean targets directly. install may work but the rpm moves a lot of things around for us. The Apache configuration file isn't in its final state but it works with the new mod_python configuration.