diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2012-12-05 23:27:57 -0500 |
|---|---|---|
| committer | Martin Kosek <mkosek@redhat.com> | 2012-12-07 10:30:33 +0100 |
| commit | bf77679909c3d73aea77f3ededd8d84e3c045d44 (patch) | |
| tree | b20fa714705c8a9da47775726d58eaa3bae7987c /ipa-client/ipa-join.c | |
| parent | 8d892f442f27026ac7195f6d9720b6da046ff477 (diff) | |
| download | freeipa.git-bf77679909c3d73aea77f3ededd8d84e3c045d44.tar.gz freeipa.git-bf77679909c3d73aea77f3ededd8d84e3c045d44.tar.xz freeipa.git-bf77679909c3d73aea77f3ededd8d84e3c045d44.zip | |
Password change in a transaction, ensure passwords are truly expired
Wrap the password change extop in a transaction.
Fix the case where a password is reset and then immediately used. If done
fast enough then the KDC may not detect that the password is expired and
grant access using the expired password rather than prompting for a reset.
https://fedorahosted.org/freeipa/ticket/1064
Diffstat (limited to 'ipa-client/ipa-join.c')
0 files changed, 0 insertions, 0 deletions