freeipa.git/daemons/ipa-slapi-plugins/ipa-lockout, branch patternfly

ipa-lockout: do not fail when default realm cannot be read

2014-02-04T11:44:45+00:00

When ipa-lockout plugin is started during FreeIPA server installation,
the default realm may not be available and plugin should then not end
with failure.

Similarly to other plugins, start in degraded mode in this situation.
Operation is fully restored during the final services restart.

https://fedorahosted.org/freeipa/ticket/4085

Fallback to global policy in ipa-lockout plugin

2014-02-03T07:57:14+00:00

krbPwdPolicyReference is no longer filled default users. Instead, plugins
fallback to hardcoded global policy reference.

Fix ipa-lockout plugin to fallback to it instead of failing to apply
the policy.

https://fedorahosted.org/freeipa/ticket/4085

Remove CFLAGS duplication.

2013-12-06T13:44:41+00:00

https://fedorahosted.org/freeipa/ticket/3896

Re-order NULL check in ipa_lockout.

2013-08-29T13:26:46+00:00

There is no risk of crash here as slapi_valueset_first_value() can handle
the case where the valueset is NULL, but there is no point in calling that
if we know there are no values.

https://fedorahosted.org/freeipa/ticket/3880

Remove unused variable

2013-07-25T11:21:30+00:00

Variable was set, but it was not used.

Remove unused variable

2013-07-25T11:21:30+00:00

Remove unused variable

2013-07-15T13:40:43+00:00

Remove build warnings

2013-03-29T07:59:36+00:00

Fix rpm build warnings report in Fedora 19 build.

https://fedorahosted.org/freeipa/ticket/3500

Fix lockout of LDAP bind.

2013-03-21T19:44:53+00:00

There were several problems:

- A cut-n-paste error where the wrong value was being considered when
  an account was administratively unlocked.
- An off-by-one error where LDAP got one extra bind attempt.
- krbPwdPolicyReference wasn't being retrieved as a virtual attribute so
  only the global_policy was used.
- The lockout duration wasn't examined in the context of too many failed
  logins so wasn't being applied properly.
- Lockout duration wasn't used properly so a user was effectively unlocked
  when the failure interval expired.
- krbLastFailedAuth and krbLoginFailedCount are no longer updated past
  max failures.

https://fedorahosted.org/freeipa/ticket/3433

ipa-lockout: Wrong sizeof argument in ipa_lockout.c

2013-02-28T11:31:54+00:00

Fixes https://fedorahosted.org/freeipa/ticket/3425