freeipa.git/daemons/ipa-kdb, branch review

Implement pwd policy iterator

2015-12-09T19:59:12+00:00

Signed-off-by: Simo Sorce 

Ticket: https://fedorahosted.org/freeipa/ticket/3015

Allow to specify Kerberos authz data type per user

2015-12-09T19:59:12+00:00

Like for services setting the ipaKrbAuthzData attribute on a user object will
allow us to control exactly what authz data is allowed for that user.
Setting NONE would allow no authz data, while setting MS-PAC would allow only
Active Directory compatible data.

Signed-off-by: Simo Sorce 

Ticket: https://fedorahosted.org/freeipa/ticket/2579

Allow admins to disable preauth for SPNs.

2015-12-08T15:09:28+00:00

Some legacy softare is not able to properly cope with preauthentication,
allow the admins to disable the requirement to use preauthentication for
all Service Principal Names if they so desire. IPA Users are excluded,
for users, which use password of lessere entrpy, preauthentication is
always required by default.

This setting does NOT override explicit policies set on service principals
or in the global policy, it only affects the default.

Signed-off-by: Simo Sorce 

Ticket: https://fedorahosted.org/freeipa/ticket/3860

FIX: ipa_kdb_principals: add missing break statement

2015-11-30T16:34:02+00:00

Needs a 'break' otherwise prevents correct reporting of data and it always overrides
it with the placeholder data.

Reviewed-By: Simo Sorce

Return default TL_DATA is krbExtraData is missing

2015-11-25T13:12:11+00:00

Signed-off-by: Simo Sorce 

Ticket: https://fedorahosted.org/freeipa/ticket/937
Reviewed-By: Martin Babinsky

ipa_kdb_tests: Fix test with default krb5.conf

2015-11-18T11:55:42+00:00

Default krb5.conf needn't have defined default_realm.
Unit tests should not rely on existing default value.

Reviewed-By: Martin Basti

cmocka_tests: Do not use deprecated cmocka interface

2015-11-18T11:54:43+00:00

The cmocka-1.0 introduced new interface for tests
which is not compatible with the old one.
And the old interface is deprecated which caused compiled warnings.

Reviewed-By: Martin Basti

ipa_kdb_tests: Fix warning Wmissing-braces

2015-11-13T17:37:23+00:00

tests/ipa_kdb_tests.c:254:9: warning: missing braces around initializer [-Wmissing-braces]
         {3, {BLACKLIST_SID"-1000", BLACKLIST_SID"-1001", BLACKLIST_SID"-1002"},
         ^
tests/ipa_kdb_tests.c:254:9: note: (near initialization for ‘test_data[6]’)
tests/ipa_kdb_tests.c:256:9: warning: missing braces around initializer [-Wmissing-braces]
         {0, NULL, 0 , NULL}
         ^
tests/ipa_kdb_tests.c:256:9: note: (near initialization for ‘test_data[7]’)
tests/ipa_kdb_tests.c:234:21: warning: missing braces around initializer [-Wmissing-braces]
     } test_data[] = {
                     ^

Reviewed-By: Martin Basti

ipa_kdb_tests: Remove unused variables

2015-11-13T17:37:23+00:00

Reviewed-By: Martin Basti

client referral support for trusted domain principals

2015-10-08T11:52:16+00:00

https://fedorahosted.org/freeipa/ticket/3559

Reviewed-By: Sumit Bose