freeipa.git/ipalib/plugins, branch master_keytab

Allow admins to disable preauth for SPNs.

2015-12-11T20:20:52+00:00

Some legacy softare is not able to properly cope with preauthentication,
allow the admins to disable the requirement to use preauthentication for
all Service Principal Names if they so desire. IPA Users are excluded,
for users, which use password of lessere entrpy, preauthentication is
always required by default.

This setting does NOT override explicit policies set on service principals
or in the global policy, it only affects the default.

Signed-off-by: Simo Sorce 

Ticket: https://fedorahosted.org/freeipa/ticket/3860

Disable User's ability to use the setkeytab exop.

2015-12-11T20:20:52+00:00

Users can still obtain a keytab for themselves using the getkeytab exop
which does not circumvent password policy checks.

Users are disallowed from using setkeytab by default in new installations
but not in existing installations (no forced upgrade).

Signed-off-by: Simo Sorce 

Ticket: https://fedorahosted.org/freeipa/ticket/5485

Introduce option to disable the SetKeytab exop

2015-12-11T20:20:52+00:00

If DisableSetKeytab is set in ipaConfig options then setkeytab will not be
available. The default is still to allow this operation for backwards
compatibility towards older clients that do not know how to use the new
GetKeytab extended operation.

Signed-off-by: Simo Sorce 

Ticket: https://fedorahosted.org/freeipa/ticket/5485

Fix minor typos

2015-12-07T11:07:47+00:00

Reviewed-By: Petr Vobornik

aci: add IPA servers host group 'ipaservers'

2015-12-07T07:13:23+00:00

https://fedorahosted.org/freeipa/ticket/3416

Reviewed-By: Martin Basti 
Reviewed-By: Simo Sorce

Extend topology help

2015-12-04T18:51:55+00:00

`ipa help topology` is improved.

Reviewed-By: Petr Vobornik 
Reviewed-By: Tomas Babej

topologysuffix: change iparepltopoconfroot API properties

2015-12-03T11:41:07+00:00

Change CLI option, label and type to reflect that it is a only a DN
of the suffix.

Reviewed-By: Jan Cholasta

Removed duplicate domain name validating function

2015-12-02T16:26:56+00:00

Reviewed-By: Martin Basti

topology: replace "suffices" with "suffixes"

2015-12-01T08:30:21+00:00

Reviewed-By: Martin Babinsky

server: use topologysuffix name in iparepltopomanagedsuffix

2015-12-01T08:30:21+00:00

Reviewed-By: Martin Babinsky