summaryrefslogtreecommitdiffstats
path: root/ipa-server/ipa-kpasswd
Commit message (Collapse)AuthorAgeFilesLines
* Minor fixSimo Sorce2007-12-111-1/+1
|
* Fix kdec.length or we may try to double free() or free() uninitiualized data.Simo Sorce2007-12-071-0/+4
|
* Fix subtle errors in kpasswdSimo Sorce2007-11-201-25/+73
|
* - Report correct information back to users when policies prevent a successfulSimo Sorce2007-11-161-43/+202
| | | | | | | password change. - Fix some minor error Initial code to read the Kerberos Master Key from the Directory
* Initial implementation of policies support.Simo Sorce2007-11-131-1/+5
| | | | | | | | | | | | | | | | | | | This patch uses the kerberos schema policy, this is the same policy used by kadmin. While this patch allows for krbPwdPolicy objects anywhere the kldap module will make the kdc fail to provide tickets if the "krbPwdPolicyReference" points to any object that is not a child of cn=<REALM>,cn=kerberos,dc=.... To let us set policies anywhere in the tree I enabled the code to actually look at parent entries and the user entry itself and specify policies directly on these objects by adding the krbPwdPolicy objectclass to them (I know its structural but DS seem to allow multiple Structural classes on the same entry). The only side effect is that kadmin will not understand this, but we don't want to use kadmin anyway as it does not understand way too many things about the directory. I've tested a few scenarios and all seem working as expected, but further testing is welcome of course.
* Additional build fixes from autoconf merge.Karl MacMillan2007-10-181-1/+1
|
* Autotool ipa-server - patch from William Jon McCann <mccann@jhu.edu>.Karl MacMillan2007-10-172-23/+50
|
* Better handling of IPv4/IPv6 sockets in ipa-kpasswdSimo Sorce2007-10-121-132/+82
| | | | Tested with UDP and works
* Karl MacMillan wrote:Karl MacMillan2007-10-091-6/+4
| | | | | | | | | | | | | > > This largish patch makes the build and installation work on 64bit > > machines. The only catch here is that to get a 64bit build you need to > > set LIBDIR on make: > > > > make install LIBDIR=/usr/lib64 > > > > The spec file does this correctly. I couldn't find any reliable way to > > guess this that works both on real systems and in the almost entirely > > empty rpm build root (you can't, for example, check for the existence > > of /usr/lib64).
* IPv6ify, untestedSimo Sorce2007-09-281-20/+55
|
* In the TCP case there is an extra (redundant) lenghtSimo Sorce2007-09-121-1/+9
| | | | field before the packet data, address the problem.
* Remove dependncy on libmhash and use openssl md4 functionsSimo Sorce2007-08-201-1/+1
| | | | | | | Remove all dependencies on mhash Remove code optimizatrion from Makefiles, right now these are developers targeted builds, so it is better to have debugging symbols around
* Complete proper daemonization by closing std* descriptors.Simo Sorce2007-08-171-0/+4
| | | | This fixes install as well as /sbin/services does not hang anymore
* Add forgotten ipa-kpasswd.initSimo Sorce2007-08-171-0/+76
|
* Improve ipa-kpasswd so that it can be installed and startedSimo Sorce2007-08-151-75/+110
| | | | | Make it daemonize Make it use syslog (LOG_DAEMON facility)
* Activate the passwd extop plugin and ipa-kpasswd daemonSimo Sorce2007-08-152-2/+16
|
* Clean up code so that Wall returns 0 complaintsSimo Sorce2007-08-151-17/+17
|
* Updates to build kpaswd and the slapi plugins.Karl MacMillan2007-08-101-3/+20
|
* Fix location of the binarySimo Sorce2007-08-092-1/+2
| | | | Add a comment on the ldap code for the future
* Make the daemon init it's own tickets.Simo Sorce2007-08-081-46/+405
| | | | | Make it blacklist clients until the previous operation is not over. General bugfixing.
* move ipa-kpasswd to a new location to conform to the new tree layoutSimo Sorce2007-08-013-0/+636