freeipa.git/daemons/ipa-slapi-plugins, branch mspac

Use the right attribute with ipapwd_entry_checks for MagicRegen

2013-10-08T07:18:57+00:00

There is a special mode to set the ipaNTHash attribute if a RC4 Kerberos
key is available for the corresponding user. This is typically triggered
by samba via the ipa_sam passdb plugin. The principal used by samba to
connect to the IPA directory server has the right to modify ipaNTHash
but no other password attribute. This means that the current check on
the userPassword attribute is too strict for this case and leads to a
failure of the whole operation.

With this patch the access right on ipaNTHash are checked if no other
password operations are requested.

Ensure credentials structure is initialized

2013-10-02T12:38:13+00:00

https://fedorahosted.org/freeipa/ticket/3953

CLDAP: do not read IPA domain from hostname

2013-09-27T13:06:21+00:00

Currently the CLDAP plugin determines the IPA domain name by reading
the current host name and splitting of the domain part. But since an IPA
server does not have to be in a DNS domain which has the same name as
the IPA domain this may fail. The domain name was used to search the
ipaNTDomainAttrs object, but since this object is unique in the tree it
is sufficient to use the objectclass in the search filter. Now the IPA
domain can be read from the ipaNTDomainAttrs object as well.

Fixes https://fedorahosted.org/freeipa/ticket/3941

Fix -Wformat-security warnings

2013-09-16T15:35:22+00:00

EXTDOM: Do not overwrite domain_name for INP_SID

2013-08-29T13:30:38+00:00

CLDAP: make sure an empty reply is returned on any error

2013-08-29T13:28:18+00:00

If ipa_cldap_decode() reply is not initialized.

Fixes https://fedorahosted.org/freeipa/ticket/3885

Re-order NULL check in ipa_lockout.

2013-08-29T13:26:46+00:00

There is no risk of crash here as slapi_valueset_first_value() can handle
the case where the valueset is NULL, but there is no point in calling that
if we know there are no values.

https://fedorahosted.org/freeipa/ticket/3880

pwd-plugin: Fix ignored return error

2013-08-28T10:42:56+00:00

CoverityID: 11904

Also remove 'inline', the compiler can do it on its own if needed.

Fixes:
https://fedorahosted.org/freeipa/ticket/3882

Remove unused variable

2013-07-25T11:21:30+00:00

Variable was set, but it was not used.

Remove unused variable

2013-07-25T11:21:30+00:00