freeipa.git - FreeIPA project

	Commit message (Collapse)	Author	Age	Files	Lines
*	Remove build warnings	Martin Kosek	2013-03-29	1	-1/+1
\| \| \| \| \| \|	Fix rpm build warnings report in Fedora 19 build. https://fedorahosted.org/freeipa/ticket/3500
*	Fix lockout of LDAP bind.	Rob Crittenden	2013-03-21	1	-91/+158
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	There were several problems: - A cut-n-paste error where the wrong value was being considered when an account was administratively unlocked. - An off-by-one error where LDAP got one extra bind attempt. - krbPwdPolicyReference wasn't being retrieved as a virtual attribute so only the global_policy was used. - The lockout duration wasn't examined in the context of too many failed logins so wasn't being applied properly. - Lockout duration wasn't used properly so a user was effectively unlocked when the failure interval expired. - krbLastFailedAuth and krbLoginFailedCount are no longer updated past max failures. https://fedorahosted.org/freeipa/ticket/3433
*	ipa-lockout: Wrong sizeof argument in ipa_lockout.c	Sumit Bose	2013-02-28	1	-1/+1
\| \| \| \|	Fixes https://fedorahosted.org/freeipa/ticket/3425
*	Honor the kdb options disabling KDC writes in ipa_lockout plugin	Rob Crittenden	2012-12-05	1	-1/+119
\| \| \| \| \| \| \| \| \| \| \| \| \|	Ther3 are two global ipaConfig options to disable undesirable writes that have performance impact. The "KDC:Disable Last Success" will disable writing back to ldap the last successful AS Request time (successful kinit) The "KDC:Disable Lockout" will disable completely writing back lockout related data. This means lockout policies will stop working. https://fedorahosted.org/freeipa/ticket/2734
*	Fix typos	Yuri Chornoivan	2011-09-07	1	-1/+1
\| \| \| \| \| \|	Fix "The the" and "classses" in FreeIPA code and messages. https://fedorahosted.org/freeipa/ticket/1480
*	Fix build warnings	Simo Sorce	2011-08-26	1	-10/+12
\| \| \| \|	Some are actual bugs.
*	Update kerberos password policy values on LDAP binds.	Rob Crittenden	2011-01-21	3	-0/+704
	On a failed bind this will update krbLoginFailedCount and krbLastFailedAuth and will potentially fail the bind altogether. On a successful bind it will zero krbLoginFailedCount and set krbLastSuccessfulAuth. This will also enforce locked-out accounts. See http://k5wiki.kerberos.org/wiki/Projects/Lockout for details on kerberos lockout. ticket 343