summaryrefslogtreecommitdiffstats
path: root/ipa-server/ipa-slapi-plugins
Commit message (Collapse)AuthorAgeFilesLines
...
* Min Pwd Change Time Check after Password reset and other minor fixesSimo Sorce2007-11-302-26/+34
|
* Use groupOfNames and member, not groupOfUniqueNames and uniqueMemberSimo Sorce2007-11-201-1/+1
|
* Fix bad segfault when pwvals is nullSimo Sorce2007-11-191-34/+24
|
* Small fix from Rob to pwd-extop-pluginKarl MacMillan2007-11-171-1/+1
|
* - Store Master Key in Ldap (Makes it easier to set up replicas)Simo Sorce2007-11-162-178/+470
| | | | | | | | | | | | | | - Does not require dirsrv access to stash file - Finalize password history support - Fix strict password length default in pwd_extop (fix install sctript too) - fix plugin configuration - Introduce 3 kind of password change: normal, admin, and ds manager - normal require adherence to policies - admin does not but password is immediately expired - ds manager can just change the password any way he likes. Initial code to read the Kerberos Master Key from the Directory
* Initial implementation of policies support.Simo Sorce2007-11-131-103/+528
| | | | | | | | | | | | | | | | | | | This patch uses the kerberos schema policy, this is the same policy used by kadmin. While this patch allows for krbPwdPolicy objects anywhere the kldap module will make the kdc fail to provide tickets if the "krbPwdPolicyReference" points to any object that is not a child of cn=<REALM>,cn=kerberos,dc=.... To let us set policies anywhere in the tree I enabled the code to actually look at parent entries and the user entry itself and specify policies directly on these objects by adding the krbPwdPolicy objectclass to them (I know its structural but DS seem to allow multiple Structural classes on the same entry). The only side effect is that kadmin will not understand this, but we don't want to use kadmin anyway as it does not understand way too many things about the directory. I've tested a few scenarios and all seem working as expected, but further testing is welcome of course.
* Add posix auto gen for single master casePete Rowley2007-11-062-12/+13
|
* Properly increment kvno and keep recent key material aroundSimo Sorce2007-10-311-13/+162
| | | | | | This is necessary for services that need to be able to respond to requests from client that acquired a service ticket just before a password change.
* Fix build issues related to the autotools conversionRob Crittenden2007-10-181-0/+1
|
* Fix build from autoconf patch import.Karl MacMillan2007-10-183-0/+6
|
* Autotool ipa-server - patch from William Jon McCann <mccann@jhu.edu>.Karl MacMillan2007-10-1710-94/+144
|
* Enabled memberof pluginRob Crittenden2007-10-161-0/+1
|
* Karl MacMillan wrote:Karl MacMillan2007-10-093-36/+9
| | | | | | | | | | | | | > > This largish patch makes the build and installation work on 64bit > > machines. The only catch here is that to get a 64bit build you need to > > set LIBDIR on make: > > > > make install LIBDIR=/usr/lib64 > > > > The spec file does this correctly. I couldn't find any reliable way to > > guess this that works both on real systems and in the almost entirely > > empty rpm build root (you can't, for example, check for the existence > > of /usr/lib64).
* Correct installation path for dna plugin.Karl MacMillan2007-09-071-1/+1
|
* Initial commit of dna plugin - origin: FDS with fix upsPete Rowley2007-09-044-1/+1222
|
* Add password request for admin userSimo Sorce2007-08-311-1/+1
| | | | | | | | | Set password for admin user using the Directory Mangaer account and the mozldapldappaswd binary to get and SSL connection Fix some timeout problems with deploying keytabs Fix ipa_pwd_extop to actuallt correctly detect an SSL connection Do not ask for the user to use for the directory unless 'dirsrv' is an existing user which may clash, create it silently
* Add DS task to fix up memberof, turn debug build back onPete Rowley2007-08-212-3/+268
|
* Remove dependncy on libmhash and use openssl md4 functionsSimo Sorce2007-08-202-9/+20
| | | | | | | Remove all dependencies on mhash Remove code optimizatrion from Makefiles, right now these are developers targeted builds, so it is better to have debugging symbols around
* Fix -Wall for memberof plugin (from Pete Rowley).Karl MacMillan2007-08-171-10/+28
|
* Fix the relative name, Richm explained that the allowed values are either:Simo Sorce2007-08-162-2/+2
| | | | | | /full/path/plugin-name.so or just plugin-name (no .so as different arches have different extensions)
* General fixes.Simo Sorce2007-08-151-0/+1
| | | | Do not start ipa_kpasswd by default yet
* in F7 all directory names have changed from fedora-ds to dirsrvSimo Sorce2007-08-153-9/+11
| | | | which should also be the name used in DS 8.0, change all occurences
* Use relative .so names for plugin so that lib/lib64 does not get in the waySimo Sorce2007-08-152-1/+1
| | | | change the pwd-extop conf ldif to a more sensible name
* Merge from upstreamSimo Sorce2007-08-155-2/+1784
|\
| * Install server plugins in correct lib directory.Karl MacMillan2007-08-152-3/+13
| |
| * Integrate memberof plugin into build.Karl MacMillan2007-08-152-4/+27
| |
| * initial commit of memberof DS pluginPete Rowley2007-08-103-0/+1749
| |
* | Rely on the default pathSimo Sorce2007-08-151-2/+2
|/ | | | Fix description
* Clean-up code to avoid Wall warningsSimo Sorce2007-08-151-30/+19
|
* Updates to build kpaswd and the slapi plugins.Karl MacMillan2007-08-102-3/+43
|
* Add dependency and a commentSimo Sorce2007-08-081-0/+5
|
* Reorganized repo to reflect packaging.Karl MacMillan2007-07-275-0/+1378