summaryrefslogtreecommitdiffstats
path: root/daemons/ipa-kdb/ipa_kdb.c
Commit message (Collapse)AuthorAgeFilesLines
* ipa-kdb: Add OTP supportNathaniel McCallum2013-05-171-1/+37
| | | | | | | | | | | | | If OTP is enabled for a user, then: 1. Long-term keys are not provided to KDB 2. The user string 'otp' is defined to KDB Since it is not secure to send radius configuration information over krb5 user strings, we simply set the string to a known default ('[]') which enables the default configuration in the KDC. https://fedorahosted.org/freeipa/ticket/3561 http://freeipa.org/page/V3/OTP
* ipa-kdb: Read global defaul ipaKrbAuthzDataSumit Bose2013-03-081-1/+26
| | | | | | | The ipaKrbAuthzData LDAP attribute is read from the ipaConfig object and the read value(s) are stored in the ipadb context. https://fedorahosted.org/freeipa/ticket/2960
* ipa-kdb: Free talloc autofree context when module is closedsbose2013-02-141-0/+3
| | | | | | | | | | | | | | | Currently kdb5kdc crashes on exit if the ipadb KDB modules is loaded and trusts are configured. The reason is the talloc autofree context which get initialised during the ndr_push_union_blob() call. On exit the KDC module is unloaded an later on atexit() tries to free the context, but all related symbols are already unloaded with the module. This patch frees the talloc autofree context during the cleanup routine of the module. Since this is called only at exit and not during normal operations this is safe even if other KDC plugins use the talloc autofree context, e.g. via some Samba libraries, as well. Fixes https://fedorahosted.org/freeipa/ticket/3410
* ipa-kdb: remove memory leaksMartin Kosek2013-02-141-0/+4
| | | | | | | | All known memory leaks caused by unfreed allocated memory or unfreed LDAP results (which should be also done after unsuccessful searches) are fixed. https://fedorahosted.org/freeipa/ticket/3413
* Add support for disabling KDC writesSimo Sorce2012-06-061-0/+66
| | | | | | | | | | | Add two global ipaConfig options to disable undesirable writes that have performance impact. The "KDC:Disable Last Success" will disable writing back to ldap the last successful AS Request time (successful kinit) The "KDC:Disable Lockout" will disable completely writing back lockout related data. This means lockout policies will stop working. https://fedorahosted.org/freeipa/ticket/2734
* policy: add function to check lockout policySimo Sorce2012-02-191-1/+1
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/2393
* ipa-kdb: add AS auditing supportSimo Sorce2012-02-141-1/+1
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/2334
* ipa-kdb: Add delgation access control supportSimo Sorce2011-12-081-1/+1
|
* Add support for generating PAC for AS requests for user principalsSimo Sorce2011-11-071-1/+6
|
* Fix CID 11019: Resource leakSimo Sorce2011-11-071-6/+7
| | | | https://fedorahosted.org/freeipa/ticket/2037
* ipa-kdb: Fix memory leakSimo Sorce2011-11-031-0/+1
|
* ipa-kdb: implement change_pwd functionSimo Sorce2011-08-261-1/+1
|
* ipa-kdb: implement function to retrieve password policiesSimo Sorce2011-08-261-43/+6
|
* ipa-kdb: Get/Store Master Key directly from LDAPSimo Sorce2011-08-261-8/+13
|
* ipa-kdb: functions to get principalSimo Sorce2011-08-261-35/+0
|
* ipa-kdb: implement get_time functionSimo Sorce2011-08-261-1/+5
|
* ipa-kdb: initialize module functionsSimo Sorce2011-08-261-6/+340
| | | | | Initialize module also on ipadb_create invocation. This is what kdb5_util expects.
* ipa-kdb: Initial plugin skeletonSimo Sorce2011-08-261-0/+185
generated by cgit (git 2.34.1) at 2024-06-21 17:21:38 +0000