freeipa.git, branch ipa-1-1FreeIPA patchesBump up to 1.1.12008-09-10T19:48:55+00:00Simo Sorcessorce@redhat.com2008-09-10T19:48:55+00:00e283210ae5d1ad27e04152f99c4245c35740f5c1
Add script to simplify operations to fix CVE 2008 3274 Import all of change master key directly into the help fix, allows for better control2008-09-10T19:43:41+00:00Simo Sorcessorce@redhat.com2008-08-19T17:31:26+00:0038ad21f75728c2bb0d8a9c9e578eba7cb2ed0b16
CVE 2008 3274 related fixes2008-09-10T19:43:41+00:00Simo Sorcessorce@redhat.com2008-08-15T21:17:03+00:009932887f2af38b9701efec27707648c026ec445c
Add a tool to change the kerberos Master Key in case an admin wants to. This tool will dump and re-encrypt all keys, then reload and change the master key in LDAP and in the stash file. It will also restart the Directory Server and the the KDC2008-09-10T19:43:41+00:00Simo Sorcessorce@redhat.com2008-08-06T20:46:18+00:00af06a9fe128038aad03c5bee1b9f91404374da61
Add encrypt_file and decrypt_file utility functions. We will use them to encrypt the replica file so that we can transport it over more safely. It contains sensitive data, by encrypting it we assure that even if a distracted admin leaves it around it cannot be accessed without knowing the access passphrase (usually the Directory Manager password)2008-09-10T19:43:41+00:00Simo Sorcessorce@redhat.com2008-08-07T20:14:37+00:001e2ee3fe3c21bef78352b4c1b5455a53ff0cbd79
Along the way fix also ipautil.run which was buggy and not passing
in correctly stdin.
Add dependency for gnupg in spec file
Along the way fix also ipautil.run which was buggy and not passing
in correctly stdin.
Add dependency for gnupg in spec file
Wrap up the raw_input() to user_input() for convenience and uniformity.2008-09-10T19:43:40+00:00Martin Nagymnagy@notas.(none)2008-07-21T10:25:37+00:0009a473ec45c681b5c26752a9e123222e2c91f9ef
Comment out code that generates keys with a random salt, apparently this does not work as expected and generates faulty keys2008-09-10T19:43:40+00:00Simo Sorcessorce@redhat.com2008-08-12T20:11:16+00:00f3d5578b9448de08f678debcad6ae8110d8c20c4
Treat Jan 1 1970 in krbPrincipalExpiration as a special date that means the account Never Expires2008-09-10T19:43:40+00:00Simo Sorcessorce@redhat.com2008-08-06T21:22:51+00:00337c9abb277bc678d2034155aac484ada2d7025e
Retrieve the kerberos configuration every time a new, it will be a bit slower but will allow for changing configurations without having to restart DS. Password operations are slow and rare enough this is an acceptable compromise.2008-09-10T19:43:40+00:00Simo Sorcessorce@redhat.com2008-08-22T19:03:50+00:0025a63b2c4d207846e61b2e72963b10b0ddf07afe
In openvz we found out some interfaces may return a null pointer here. Skip them if no address is provided or we later get a segfault because we dereference a null pointer.2008-09-10T19:43:40+00:00Simo Sorcessorce@redhat.com2008-07-15T20:13:43+00:005e257861c88947a4605a99a419658f32473aa27c