Commit - freeipa - 69ae9febfb4462766b3bfe3e07e76550ece97b42

freeipa

`69ae9fe` ipa-kdb: when applying ticket policy, do not deny PKINIT

1 file Authored by abbra a year ago, Committed by antorres a year ago,

raw patch tree parent

1 file changed. 2 lines added. 5 lines removed.

    ipa-kdb: when applying ticket policy, do not deny PKINIT
    
    PKINIT differs from other pre-authentication methods by the fact that it
    can be matched indepedently of the user authentication types via certmap
    plugin in KDC.
    
    Since PKINIT is a strong authentication method, allow its authentication
    indicator and only apply the ticket policy.
    
    Fixes: https://pagure.io/freeipa/issue/9485
    
    Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
    Reviewed-By: Francisco Trivino <ftrivino@redhat.com>

daemons/ipa-kdb/ipa_kdb_kdcpolicy.c

file modified

+2 -5

freeipa

Source Code

69ae9fe ipa-kdb: when applying ticket policy, do not deny PKINIT

1 file Authored by abbra a year ago, Committed by antorres a year ago,

`69ae9fe` ipa-kdb: when applying ticket policy, do not deny PKINIT