freeipa.git/daemons, branch custodia

prevent operation on tombstones

2015-10-15T12:24:33+00:00

Reviewed-By: Jan Cholasta

handle multiple managed suffixes

2015-10-15T12:24:33+00:00

    trigger topology updaet if suffix entry is added
    trigger topology update if managedSuffix is modified in host entry

Reviewed-by: Simo Sorce 
Reviewed-By: Jan Cholasta

topology plugin configuration workaround

2015-10-15T12:24:33+00:00

Reviewed-by: Simo Sorce 
Reviewed-By: Jan Cholasta

client referral support for trusted domain principals

2015-10-08T11:52:16+00:00

https://fedorahosted.org/freeipa/ticket/3559

Reviewed-By: Sumit Bose

Avoid ipa-dnskeysync-replica & ipa-ods-exporter crashes caused by exceeding LDAP limits

2015-10-07T12:28:50+00:00

ldap2 internally does LDAP search to find out what LDAP search limits
should be used (!). The problem is that this internal search has hardcoded
limits and throws LimitExceeded exception when DS is too slow.

DNSSEC daemons do not need any abstractions from ldap2 so we are going
to use ipaldap directly. This will avoid the unnecessary search and
associated risks.

https://fedorahosted.org/freeipa/ticket/5342

Reviewed-By: Martin Basti

Use six.Stringio instead of StringIO.StringIO

2015-10-07T08:27:20+00:00

The StringIO class was moved to the io module.
(In Python 2, io.StringIO is available, but is Unicode-only.)

Reviewed-By: David Kupka 
Reviewed-By: Jan Cholasta 
Reviewed-By: Martin Basti

Fix an integer underflow bug in libotp

2015-09-29T13:16:09+00:00

Temporarily storing the offset time in an unsigned integer causes the
value of the offset to underflow when a (valid) negative offset value
is generated. Using a signed variable avoids this problem.

https://fedorahosted.org/freeipa/ticket/5333

Reviewed-By: Tomas Babej

DNSSEC: Wrap master key using RSA OAEP instead of old PKCS v1.5.

2015-09-03T16:22:53+00:00

https://fedorahosted.org/freeipa/ticket/5273

Reviewed-By: Martin Basti

DNSSEC: Fix key metadata export

2015-09-03T16:20:36+00:00

Incorrect SQL join condition could lead to situation where metadata from
ZSK and KSK were interchanged.

https://fedorahosted.org/freeipa/ticket/5273

Reviewed-By: Martin Basti 
Reviewed-By: Oleg Fayans

DNSSEC: Fix deadlock in ipa-ods-exporter <-> ods-enforcerd interaction

2015-09-03T16:20:36+00:00

https://fedorahosted.org/freeipa/ticket/5273

Reviewed-By: Martin Basti 
Reviewed-By: Oleg Fayans