summaryrefslogtreecommitdiffstats
path: root/daemons/ipa-kdb
Commit message (Expand)AuthorAgeFilesLines
* ipa-kdb: add unit_tests for string_to_sid() and dom_sid_string()Sumit Bose2015-07-081-0/+60
* ipa-kdb: make string_to_sid() and dom_sid_string() more robustSumit Bose2015-07-081-1/+10
* ipa-kdb: add unit-test for filter_logon_info()Sumit Bose2015-07-083-50/+323
* ipa-kdb: convert test to cmockaSumit Bose2015-07-082-88/+49
* ipa-kdb: filter out group membership from MS-PAC for exact SID matches tooAlexander Bokovoy2015-07-081-1/+99
* ipa-kdb: use proper memory chunk size when moving sidsAlexander Bokovoy2015-07-081-3/+17
* ipa-kdb: common function to get key encodings/salt typesMartin Babinsky2015-06-292-70/+62
* Fix s4u2proxy README and add warningSimo Sorce2015-06-081-2/+14
* Detect default encsalts kadmin password changeSimo Sorce2015-05-275-0/+144
* ipa-kdb: reject principals from disabled domains as a KDC policyAlexander Bokovoy2015-02-161-1/+1
* ipa-kdb: when processing transitions, hand over unknown ones to KDCAlexander Bokovoy2015-02-161-1/+2
* Handle DAL ABI change in MIT 1.13Simo Sorce2015-02-132-0/+14
* Expose the disabled User Auth TypeNathaniel McCallum2015-02-121-6/+7
* ipa-kdb: more robust handling of principal addition/editingMartin Babinsky2015-01-301-23/+47
* always get PAC for client principal if AS_REQ is trueMartin Babinsky2015-01-301-1/+1
* ipa-kdb: unexpected error code in 'ipa_kdb_audit_as_req' triggers a messageMartin Babinsky2015-01-302-3/+4
* Avoid calling ldap functions without a contextSimo Sorce2015-01-081-3/+16
* Fix unchecked return value in ipa-kdbJan Cholasta2014-11-251-1/+1
* Fix possible NULL dereference in ipa-kdbJan Cholasta2014-11-051-3/+5
* ipa-kdb: fix unit testsSumit Bose2014-09-262-1/+4
* Periodically refresh global ipa-kdb configurationNathaniel McCallum2014-06-195-45/+86
* Restore krbCanonicalName handlingNalin Dahyabhai2014-05-301-5/+1
* Accept any alias, not just the last valueNalin Dahyabhai2014-05-301-0/+3
* kdb: Don't provide password expiration when using only RADIUSNathaniel McCallum2014-05-221-0/+4
* Avoid passing non-terminated string to is_master_hostMartin Kosek2014-03-111-1/+2
* ipa-kdb: do not fetch client principal if it is the same as existing entryAlexander Bokovoy2014-03-061-6/+13
* fix filtering of subdomain-based trust usersAlexander Bokovoy2014-03-051-9/+32
* ipa-kdb: make sure we don't produce MS-PAC in case of authdata flag cleared b...Alexander Bokovoy2014-02-261-0/+8
* ipa-kdb: in case of delegation use original client's database entry, not the ...Alexander Bokovoy2014-02-261-2/+7
* Add support to ipa-kdb for keyless principalsNathaniel McCallum2014-02-191-0/+18
* ipa-kdb: validate that an OTP user has tokensNathaniel McCallum2014-02-143-25/+135
* BUILD: Fix portability of NSS in file ipa_pwd.cLukas Slebodnik2014-01-281-1/+3
* Add krbticketPolicyAux objectclass if neededSimo Sorce2013-11-262-0/+35
* ipa-kdb: Handle parent-child relationship for subdomainsAlexander Bokovoy2013-10-041-10/+99
* KDC: implement transition check for trusted domainsAlexander Bokovoy2013-10-043-2/+68
* Add Delegation Info to MS-PACSimo Sorce2013-09-131-2/+160
* kdb-princ: Fix memory leakSimo Sorce2013-08-281-0/+1
* kdb-mspac: Fix out of bounds memsetSimo Sorce2013-08-281-1/+1
* IPA KDB MS-PAC: remove unused variableJakub Hrozek2013-07-231-1/+0
* IPA KDB MS-PAC: return ENOMEM if allocation failsJakub Hrozek2013-07-231-0/+1
* ipa-kdb: reinit mspac on HTTP TGT acquisition to aid trust-add caseAlexander Bokovoy2013-07-233-6/+29
* ipa-kdb: cache KDC hostname on startupAlexander Bokovoy2013-07-233-6/+19
* Use libunistring ulc_casecmp() on unicode stringsNathaniel McCallum2013-07-184-7/+26
* Generate syntethic MS-PAC for all services running on IPA masterAlexander Bokovoy2013-07-111-6/+73
* Add PAC to master host TGTsSumit Bose2013-07-111-39/+115
* ipa-kdb: Add OTP supportNathaniel McCallum2013-05-173-1/+78
* Remove build warningsMartin Kosek2013-03-291-1/+1
* Add unit test for get_authz_data_types()Sumit Bose2013-03-082-0/+246
* ipa-kdb: add PAC only if requestedSumit Bose2013-03-081-2/+140
* ipa-kdb: Read ipaKrbAuthzData with other principal dataSumit Bose2013-03-082-0/+18