summaryrefslogtreecommitdiffstats
path: root/daemons/ipa-kdb
Commit message (Expand)AuthorAgeFilesLines
* Add PAC filteringSimo Sorce2012-08-021-8/+100
* Split out manipulation of logon_info blobSimo Sorce2012-08-021-40/+69
* Properly name function to add ipa external groupsSimo Sorce2012-08-021-35/+39
* Load list of trusted domain on connecting to ldapSimo Sorce2012-08-021-6/+104
* Move mspac structure to be a private pointerSimo Sorce2012-08-022-25/+33
* Move code into common krb5 utilsSimo Sorce2012-07-301-141/+7
* Fix typoSumit Bose2012-07-091-1/+1
* Filter groups in the PACSumit Bose2012-06-281-1/+452
* Add support for disabling KDC writesSimo Sorce2012-06-063-0/+75
* ipa-kdb: Add MS-PAC on constrained delegation.Simo Sorce2012-06-071-22/+26
* Perform case-insensitive searches for principals on TGS requestsAlexander Bokovoy2012-06-071-21/+52
* Fix setting domain_sidSimo Sorce2012-05-291-1/+1
* Check for locked-out user before incrementing lastfail.Rob Crittenden2012-05-181-4/+6
* Fix theoretical leak discovered by coveritySimo Sorce2012-04-171-0/+1
* Fix MS-PAC checks when using s4u2proxySimo Sorce2012-04-031-4/+6
* Fix failure count interval attribute name in query for password policy.Rob Crittenden2012-03-291-1/+1
* Fix memleak and silence Coverity defectsSimo Sorce2012-03-223-0/+9
* ipa-kdb: fix delegation acl checkSimo Sorce2012-02-281-2/+4
* policy: add function to check lockout policySimo Sorce2012-02-193-1/+62
* ipa-kdb: Fix ACL evaluatorSimo Sorce2012-02-201-1/+4
* Remove compat definesSimo Sorce2012-02-161-32/+0
* ipa-kdb: set krblastpwdchange only when keys have been effectively changedSimo Sorce2012-02-151-2/+4
* ipa-kdb: Avoid lookup on modify if possibleSimo Sorce2012-02-151-19/+27
* ipa-kdb: add AS auditing supportSimo Sorce2012-02-147-91/+254
* ipa-kdb: Create PAC's KDC checksum with right keySimo Sorce2012-01-111-2/+89
* ipa-kdb: Verify the correct checksum in PAC validationSimo Sorce2012-01-111-5/+45
* ipa-kdb: return properly when no PAC is availableSimo Sorce2011-12-091-10/+3
* ipa-kdb: Add delgation access control supportSimo Sorce2011-12-085-1/+342
* ipa-kdb: enhance deref searchesSimo Sorce2011-12-083-13/+39
* ipa-kdb: Fix copy and paste typoSimo Sorce2011-12-071-1/+1
* ipa-kdb: fix memleaks in ipa_kdb_mspac.cSimo Sorce2011-12-021-7/+8
* ipa-kdb: Remove unused CFLAGS/LIBS from MakefilesSimo Sorce2011-12-021-2/+0
* ipa-kdb: fix free() of uninitialized varSimo Sorce2011-11-291-0/+1
* ipa-kdb: Support re-signing PAC with different checksumSimo Sorce2011-11-291-2/+52
* MS-PAC: Add support for verifying PAC in TGS requestsSimo Sorce2011-11-071-7/+62
* Add support for generating PAC for AS requests for user principalsSimo Sorce2011-11-076-1/+895
* Fix CID 11027: Wrong sizeof argumentSimo Sorce2011-11-071-1/+1
* Fix CID 11026: Resource leakSimo Sorce2011-11-071-1/+4
* Fix CID 11025: Resource leakSimo Sorce2011-11-071-2/+2
* Fix CID 11024: Resource leakSimo Sorce2011-11-071-0/+1
* Fix CID 11023: Resource leakSimo Sorce2011-11-071-0/+1
* Fix CID 11022: Resource leakSimo Sorce2011-11-071-0/+7
* Fix CID 11020: Resource leakSimo Sorce2011-11-071-0/+1
* Fix CID 11019: Resource leakSimo Sorce2011-11-071-6/+7
* ipa-kdb: Fix memory leakSimo Sorce2011-11-031-0/+1
* ipa-kdb: Fix legacy password hashes generationSimo Sorce2011-10-062-3/+2
* ipa-kdb: Fix expiration time calculationSimo Sorce2011-09-262-17/+18
* ipa-kdb: Properly set password expiration time.Simo Sorce2011-09-193-4/+74
* ipa-kdb: Be flexibleSimo Sorce2011-08-261-2/+2
* ipa-kdb: add password policy supportSimo Sorce2011-08-264-8/+347