freeipa.git/ipa-server, branch ipa-1-1

Add script to simplify operations to fix CVE 2008 3274 Import all of change master key directly into the help fix, allows for better control

2008-09-10T19:43:41+00:00

CVE 2008 3274 related fixes

2008-09-10T19:43:41+00:00

Wrap up the raw_input() to user_input() for convenience and uniformity.

2008-09-10T19:43:40+00:00

Comment out code that generates keys with a random salt, apparently this does not work as expected and generates faulty keys

2008-09-10T19:43:40+00:00

Treat Jan 1 1970 in krbPrincipalExpiration as a special date that means the account Never Expires

2008-09-10T19:43:40+00:00

Retrieve the kerberos configuration every time a new, it will be a bit slower but will allow for changing configurations without having to restart DS. Password operations are slow and rare enough this is an acceptable compromise.

2008-09-10T19:43:40+00:00

In openvz we found out some interfaces may return a null pointer here. Skip them if no address is provided or we later get a segfault because we dereference a null pointer.

2008-09-10T19:43:40+00:00

Fix typo in inet type

2008-09-10T19:43:40+00:00

slapi_pw_find_sv() expects an array, make sure we have a NULL terminated one to avoid potential segfaults Avoid leaking memory too.

2008-09-10T19:43:40+00:00

Must index uidnumber and gidnumber and any attribute that dna plugin is going to generate or that we need to search on.

2008-09-10T19:43:40+00:00