freeipa.git/daemons, branch master

Fix condition bug in ipa-pwd-extop plugin. Variable used uninitialized.

2010-02-04T16:09:59+00:00

Add BIND pre-op for DS->IPA password migration to ipa-pwd-extop DS plugin.

2010-01-20T21:53:51+00:00

Allow adding entries with pre-hashed passwords, but don't generate keys for them.

2010-01-20T21:53:41+00:00

Fix bug #528922.

No longer use the IPA-specific memberof plugin. Use the DS-supplied one.

2009-10-12T13:37:38+00:00

Add support for per-group kerberos password policy.

2009-10-05T19:29:55+00:00

Use a Class of Service template to do per-group password policy. The
design calls for non-overlapping groups but with cospriority we can
still make sense of things.

The password policy entries stored under the REALM are keyed only on
the group name because the MIT ldap plugin can't handle quotes in the
DN. It also can't handle spaces between elements in the DN.

Enrollment for a host in an IPA domain

2009-09-24T23:45:49+00:00

This will create a host service principal and may create a host entry (for
admins).  A keytab will be generated, by default in /etc/krb5.keytab
If no kerberos credentails are available then enrollment over LDAPS is used
if a password is provided.

This change requires that openldap be used as our C LDAP client. It is much
easier to do SSL using openldap than mozldap (no certdb required). Otherwise
we'd have to write a slew of extra code to create a temporary cert database,
import the CA cert, ...

Check error in kpasswd

2009-07-10T13:42:21+00:00

Remove our copy of the DNA plugin and use the one that comes with DS.

2009-03-06T22:37:37+00:00

The DS plugin does config checking when adding new entries online so
we are dropping the Posix subtree.

Minor cleanup of configure.ac

2009-02-05T14:32:41+00:00

Consolidate to a single autogen.sh and remove a redundant make target

2009-02-04T14:04:22+00:00

Also cheat a little and don't force auto* to require files to exist