summaryrefslogtreecommitdiffstats
path: root/daemons/ipa-kdb
Commit message (Expand)AuthorAgeFilesLines
* Periodically refresh global ipa-kdb configurationNathaniel McCallum2014-06-195-45/+86
* Restore krbCanonicalName handlingNalin Dahyabhai2014-05-301-5/+1
* Accept any alias, not just the last valueNalin Dahyabhai2014-05-301-0/+3
* kdb: Don't provide password expiration when using only RADIUSNathaniel McCallum2014-05-221-0/+4
* Avoid passing non-terminated string to is_master_hostMartin Kosek2014-03-111-1/+2
* ipa-kdb: do not fetch client principal if it is the same as existing entryAlexander Bokovoy2014-03-061-6/+13
* fix filtering of subdomain-based trust usersAlexander Bokovoy2014-03-051-9/+32
* ipa-kdb: make sure we don't produce MS-PAC in case of authdata flag cleared b...Alexander Bokovoy2014-02-261-0/+8
* ipa-kdb: in case of delegation use original client's database entry, not the ...Alexander Bokovoy2014-02-261-2/+7
* Add support to ipa-kdb for keyless principalsNathaniel McCallum2014-02-191-0/+18
* ipa-kdb: validate that an OTP user has tokensNathaniel McCallum2014-02-143-25/+135
* BUILD: Fix portability of NSS in file ipa_pwd.cLukas Slebodnik2014-01-281-1/+3
* Add krbticketPolicyAux objectclass if neededSimo Sorce2013-11-262-0/+35
* ipa-kdb: Handle parent-child relationship for subdomainsAlexander Bokovoy2013-10-041-10/+99
* KDC: implement transition check for trusted domainsAlexander Bokovoy2013-10-043-2/+68
* Add Delegation Info to MS-PACSimo Sorce2013-09-131-2/+160
* kdb-princ: Fix memory leakSimo Sorce2013-08-281-0/+1
* kdb-mspac: Fix out of bounds memsetSimo Sorce2013-08-281-1/+1
* IPA KDB MS-PAC: remove unused variableJakub Hrozek2013-07-231-1/+0
* IPA KDB MS-PAC: return ENOMEM if allocation failsJakub Hrozek2013-07-231-0/+1
* ipa-kdb: reinit mspac on HTTP TGT acquisition to aid trust-add caseAlexander Bokovoy2013-07-233-6/+29
* ipa-kdb: cache KDC hostname on startupAlexander Bokovoy2013-07-233-6/+19
* Use libunistring ulc_casecmp() on unicode stringsNathaniel McCallum2013-07-184-7/+26
* Generate syntethic MS-PAC for all services running on IPA masterAlexander Bokovoy2013-07-111-6/+73
* Add PAC to master host TGTsSumit Bose2013-07-111-39/+115
* ipa-kdb: Add OTP supportNathaniel McCallum2013-05-173-1/+78
* Remove build warningsMartin Kosek2013-03-291-1/+1
* Add unit test for get_authz_data_types()Sumit Bose2013-03-082-0/+246
* ipa-kdb: add PAC only if requestedSumit Bose2013-03-081-2/+140
* ipa-kdb: Read ipaKrbAuthzData with other principal dataSumit Bose2013-03-082-0/+18
* ipa-kdb: Read global defaul ipaKrbAuthzDataSumit Bose2013-03-082-1/+29
* Revert "MS-PAC: Special case NFS services"Sumit Bose2013-03-081-35/+1
* ipa-kdb: Dereference after null check in ipa_kdb_mspac.cSumit Bose2013-02-281-1/+1
* ipa-kdb: Uninitialized scalar variable in ipadb_reinit_mspac()Sumit Bose2013-02-281-5/+4
* ipa-kdb: remove unused variableSumit Bose2013-02-281-1/+1
* ipa-kdb: Free talloc autofree context when module is closedsbose2013-02-141-0/+3
* ipa-kdb: fix retry logic in ipadb_deref_searchMartin Kosek2013-02-141-1/+1
* ipa-kdb: remove memory leaksMartin Kosek2013-02-144-2/+25
* ipa-kdb: read SID blacklist from LDAPMartin Kosek2013-02-122-54/+104
* ipa-kdb: reinitialize LDAP configuration for known realmsMartin Kosek2013-02-121-12/+45
* ipa-kdb: avoid ENOMEM when all SIDs are filtered outMartin Kosek2013-02-121-4/+14
* ipa-kdb: add sentinel for LDAPDerefSpec allocationMartin Kosek2013-02-121-5/+6
* Prevent integer overflow when setting krbPasswordExpirationTomas Babej2013-02-084-13/+47
* ipa-kdb: Support Windows 2012 ServerAlexander Bokovoy2012-12-071-15/+253
* Lookup the user SID in external group as wellSumit Bose2012-11-301-5/+14
* MS-PAC: Special case NFS servicesSimo Sorce2012-11-301-1/+35
* ipadb: reload trust information if domain is not knownSumit Bose2012-10-091-1/+39
* ipadb_iterate(): handle match_entry == NULLSumit Bose2012-09-052-0/+10
* Add PAC filteringSimo Sorce2012-08-021-8/+100
* Split out manipulation of logon_info blobSimo Sorce2012-08-021-40/+69