freeipa.git/ipa-server/ipa-slapi-plugins, branch ipa-1-1

Comment out code that generates keys with a random salt, apparently this does not work as expected and generates faulty keys

2008-09-10T19:43:40+00:00

Treat Jan 1 1970 in krbPrincipalExpiration as a special date that means the account Never Expires

2008-09-10T19:43:40+00:00

Retrieve the kerberos configuration every time a new, it will be a bit slower but will allow for changing configurations without having to restart DS. Password operations are slow and rare enough this is an acceptable compromise.

2008-09-10T19:43:40+00:00

slapi_pw_find_sv() expects an array, make sure we have a NULL terminated one to avoid potential segfaults Avoid leaking memory too.

2008-09-10T19:43:40+00:00

Let DS encode the password, this will allow IPA -> AD password

2008-06-11T13:18:38+00:00

synchronization to work again.

Fedora DS 1.1.1 exposes a public task api. In order for ipa-1-0 to build against this, ipa-memberof.c needs to be able to use the public api or the private one.

2008-05-30T17:49:46+00:00

Use a value that is explicitly 64bit on all architectures

2008-05-23T19:07:49+00:00

remove useless if-before-free tests

2008-05-15T16:59:28+00:00

I've been on a crusade (;-) to remove useless if-before-free tests,
so ran a script that spotted some here.  I think I removed the first
batch (without braces) automatically, then manually removed the ones
with curly braces around the free statements.

You may well have doubts about the portability of removing those
tests, but as long as you don't care about SunOS4 or earlier, you'll
be fine.  I've done similar things for e.g., coreutils, glibc, and git,
and have had no problems.

* ipa_pwd_extop.c (encrypt_encode_key): Handle malloc failure.

2008-05-15T16:59:28+00:00

If there is an error we need to send back a reply ourselves.

2008-05-15T16:59:28+00:00

Return also an intelligible error message.