freeipa.git/daemons/ipa-kdb, branch my-master

Add Delegation Info to MS-PAC

2013-05-23T16:55:27+00:00

NO-PUSH: TODO and 2.0->3.0 upgrade notes

2013-05-23T16:55:27+00:00

ipa-kdb: Add OTP support

2013-05-17T07:30:51+00:00

If OTP is enabled for a user, then:
  1. Long-term keys are not provided to KDB
  2. The user string 'otp' is defined to KDB

Since it is not secure to send radius configuration information
over krb5 user strings, we simply set the string to a known default
('[]') which enables the default configuration in the KDC.

https://fedorahosted.org/freeipa/ticket/3561
http://freeipa.org/page/V3/OTP

Remove build warnings

2013-03-29T07:59:36+00:00

Fix rpm build warnings report in Fedora 19 build.

https://fedorahosted.org/freeipa/ticket/3500

Add unit test for get_authz_data_types()

2013-03-08T09:46:00+00:00

https://fedorahosted.org/freeipa/ticket/2960

ipa-kdb: add PAC only if requested

2013-03-08T09:46:00+00:00

Instead of always adding a PAC to the Kerberos ticket the global default
for the authorization data and the authorization data of the service
entry is evaluated and the PAC is added accordingly.

https://fedorahosted.org/freeipa/ticket/2960

ipa-kdb: Read ipaKrbAuthzData with other principal data

2013-03-08T09:46:00+00:00

The ipaKrbAuthzData LDAP attribute is read together with the other data
of the requestedprincipal and the read value(s) are stored in the e-data
of the entry for later use.

https://fedorahosted.org/freeipa/ticket/2960

ipa-kdb: Read global defaul ipaKrbAuthzData

2013-03-08T09:46:00+00:00

The ipaKrbAuthzData LDAP attribute is read from the ipaConfig object
and the read value(s) are stored in the ipadb context.

https://fedorahosted.org/freeipa/ticket/2960

Revert "MS-PAC: Special case NFS services"

2013-03-08T09:46:00+00:00

This reverts commit 5269458f552380759c86018cd1f30b64761be92e.

With the implementation of https://fedorahosted.org/freeipa/ticket/2960
a special hardcoded handling of NFS service tickets is not needed
anymore.

ipa-kdb: Dereference after null check in ipa_kdb_mspac.c

2013-02-28T11:31:02+00:00

A wrong logic was used to check ipactx.

Fixes https://fedorahosted.org/freeipa/ticket/3424