summaryrefslogtreecommitdiffstats
path: root/daemons/ipa-kdb
Commit message (Expand)AuthorAgeFilesLines
* Add krbticketPolicyAux objectclass if neededSimo Sorce2013-11-262-0/+35
* ipa-kdb: Handle parent-child relationship for subdomainsAlexander Bokovoy2013-10-041-10/+99
* KDC: implement transition check for trusted domainsAlexander Bokovoy2013-10-043-2/+68
* Add Delegation Info to MS-PACSimo Sorce2013-09-131-2/+160
* kdb-princ: Fix memory leakSimo Sorce2013-08-281-0/+1
* kdb-mspac: Fix out of bounds memsetSimo Sorce2013-08-281-1/+1
* IPA KDB MS-PAC: remove unused variableJakub Hrozek2013-07-231-1/+0
* IPA KDB MS-PAC: return ENOMEM if allocation failsJakub Hrozek2013-07-231-0/+1
* ipa-kdb: reinit mspac on HTTP TGT acquisition to aid trust-add caseAlexander Bokovoy2013-07-233-6/+29
* ipa-kdb: cache KDC hostname on startupAlexander Bokovoy2013-07-233-6/+19
* Use libunistring ulc_casecmp() on unicode stringsNathaniel McCallum2013-07-184-7/+26
* Generate syntethic MS-PAC for all services running on IPA masterAlexander Bokovoy2013-07-111-6/+73
* Add PAC to master host TGTsSumit Bose2013-07-111-39/+115
* ipa-kdb: Add OTP supportNathaniel McCallum2013-05-173-1/+78
* Remove build warningsMartin Kosek2013-03-291-1/+1
* Add unit test for get_authz_data_types()Sumit Bose2013-03-082-0/+246
* ipa-kdb: add PAC only if requestedSumit Bose2013-03-081-2/+140
* ipa-kdb: Read ipaKrbAuthzData with other principal dataSumit Bose2013-03-082-0/+18
* ipa-kdb: Read global defaul ipaKrbAuthzDataSumit Bose2013-03-082-1/+29
* Revert "MS-PAC: Special case NFS services"Sumit Bose2013-03-081-35/+1
* ipa-kdb: Dereference after null check in ipa_kdb_mspac.cSumit Bose2013-02-281-1/+1
* ipa-kdb: Uninitialized scalar variable in ipadb_reinit_mspac()Sumit Bose2013-02-281-5/+4
* ipa-kdb: remove unused variableSumit Bose2013-02-281-1/+1
* ipa-kdb: Free talloc autofree context when module is closedsbose2013-02-141-0/+3
* ipa-kdb: fix retry logic in ipadb_deref_searchMartin Kosek2013-02-141-1/+1
* ipa-kdb: remove memory leaksMartin Kosek2013-02-144-2/+25
* ipa-kdb: read SID blacklist from LDAPMartin Kosek2013-02-122-54/+104
* ipa-kdb: reinitialize LDAP configuration for known realmsMartin Kosek2013-02-121-12/+45
* ipa-kdb: avoid ENOMEM when all SIDs are filtered outMartin Kosek2013-02-121-4/+14
* ipa-kdb: add sentinel for LDAPDerefSpec allocationMartin Kosek2013-02-121-5/+6
* Prevent integer overflow when setting krbPasswordExpirationTomas Babej2013-02-084-13/+47
* ipa-kdb: Support Windows 2012 ServerAlexander Bokovoy2012-12-071-15/+253
* Lookup the user SID in external group as wellSumit Bose2012-11-301-5/+14
* MS-PAC: Special case NFS servicesSimo Sorce2012-11-301-1/+35
* ipadb: reload trust information if domain is not knownSumit Bose2012-10-091-1/+39
* ipadb_iterate(): handle match_entry == NULLSumit Bose2012-09-052-0/+10
* Add PAC filteringSimo Sorce2012-08-021-8/+100
* Split out manipulation of logon_info blobSimo Sorce2012-08-021-40/+69
* Properly name function to add ipa external groupsSimo Sorce2012-08-021-35/+39
* Load list of trusted domain on connecting to ldapSimo Sorce2012-08-021-6/+104
* Move mspac structure to be a private pointerSimo Sorce2012-08-022-25/+33
* Move code into common krb5 utilsSimo Sorce2012-07-301-141/+7
* Fix typoSumit Bose2012-07-091-1/+1
* Filter groups in the PACSumit Bose2012-06-281-1/+452
* Add support for disabling KDC writesSimo Sorce2012-06-063-0/+75
* ipa-kdb: Add MS-PAC on constrained delegation.Simo Sorce2012-06-071-22/+26
* Perform case-insensitive searches for principals on TGS requestsAlexander Bokovoy2012-06-071-21/+52
* Fix setting domain_sidSimo Sorce2012-05-291-1/+1
* Check for locked-out user before incrementing lastfail.Rob Crittenden2012-05-181-4/+6
* Fix theoretical leak discovered by coveritySimo Sorce2012-04-171-0/+1