Commits - freeipa - Pagure.io

Simo Sorce • 15 years ago

e283210

Add script to simplify operations to fix CVE 2008 3274 Import all of change master key directly into the help fix, allows for better control

Simo Sorce • 15 years ago

38ad21f

CVE 2008 3274 related fixes

Simo Sorce • 15 years ago

9932887

Add a tool to change the kerberos Master Key in case an admin wants to. This tool will dump and re-encrypt all keys, then reload and change the master key in LDAP and in the stash file. It will also restart the Directory Server and the the KDC

Simo Sorce • 15 years ago

af06a9f

Add encrypt_file and decrypt_file utility functions. We will use them to encrypt the replica file so that we can transport it over more safely. It contains sensitive data, by encrypting it we assure that even if a distracted admin leaves it around it cannot be accessed without knowing the access passphrase (usually the Directory Manager password)

Simo Sorce • 15 years ago

1e2ee3f

Wrap up the raw_input() to user_input() for convenience and uniformity.

Martin Nagy • 15 years ago

09a473e

Comment out code that generates keys with a random salt, apparently this does not work as expected and generates faulty keys

Simo Sorce • 15 years ago

f3d5578

Treat Jan 1 1970 in krbPrincipalExpiration as a special date that means the account Never Expires

Simo Sorce • 15 years ago

337c9ab

Retrieve the kerberos configuration every time a new, it will be a bit slower but will allow for changing configurations without having to restart DS. Password operations are slow and rare enough this is an acceptable compromise.

Simo Sorce • 15 years ago

25a63b2

In openvz we found out some interfaces may return a null pointer here. Skip them if no address is provided or we later get a segfault because we dereference a null pointer.

Simo Sorce • 15 years ago

5e25786

Fix typo in inet type

Simo Sorce • 15 years ago

624388b

slapi_pw_find_sv() expects an array, make sure we have a NULL terminated one to avoid potential segfaults Avoid leaking memory too.

Simo Sorce • 15 years ago

6e0af50

Must index uidnumber and gidnumber and any attribute that dna plugin is going to generate or that we need to search on.

Simo Sorce • 15 years ago

128587a

Index the memberof attribute

Rob Crittenden • 15 years ago

f42010f

Fix uninizialized counter, was causing allocation to fail and command to return in case any encryption type was explicitly requested

Simo Sorce • 15 years ago

b39181f

Move version to 1.1.0 in preparation for new patch release

Simo Sorce • 15 years ago

e9b96cd

Let DS encode the password, this will allow IPA -> AD password

Simo Sorce • 15 years ago

3f4b182

Ensure that the realm name is upper-case.

Rob Crittenden • 15 years ago

d1322c6

Ignore empty values when converting a multi-valued form field back to a list. This will prevent validation errors when validate.UniqueList() is executed.

Rob Crittenden • 15 years ago

ad3e4d4

When an LDAP connection fails, display the host one is trying to connect to.

Rob Crittenden • 15 years ago

42cada4

Add our own SIGTERM handler so we can do clean shutdowns.

Rob Crittenden • 15 years ago

48f2e3c

Make it clear which packages are being configured and which aren't.

Rob Crittenden • 15 years ago

77483ac

Add sbin_t directory read permissions

Rob Crittenden • 15 years ago

1f511d4

Fix typo

Rob Crittenden • 15 years ago

d600f9b

Under some conditions rl may not have been initialized so the config may error out with:

Rob Crittenden • 15 years ago

ec2eff9

Fix import for version

Rob Crittenden • 15 years ago

b26fc32

Add -p/--password option so the DM password can be passed on the command-line.

Rob Crittenden • 15 years ago

68e14ed

Don't make the search criteria lower-case so one can do case-sensitive searches (such as looking for HTTP principals)

Rob Crittenden • 15 years ago

12899d9

Fix some minor man page issues.

Rob Crittenden • 15 years ago

5c916a1

Fix some formatting issues and correct the example.

Rob Crittenden • 15 years ago

d6f7998

Fix typo and reorder -q|--quiet so it displays nicer. popt isn't putting it on a separate line so moving it up front makes it easier to find.

Rob Crittenden • 15 years ago

28008a4

Fix issue of double logging in ipa_error.log.

Rob Crittenden • 15 years ago

9bcd31e

Move version.py to the common ipa directory instead of being server-based so it can be used by the client tool.

Rob Crittenden • 15 years ago

c58b7a3

Fix some minor man page issues.

Rob Crittenden • 15 years ago

5a56b7c

Don't prompt regarding previous DS installations in unattended mode.

Rob Crittenden • 15 years ago

f87dc91

Try to clear up messages prompting for domain and IPA server when DNS discovery fails to find them.

Rob Crittenden • 15 years ago

e935287

Fedora DS 1.1.1 exposes a public task api. In order for ipa-1-0 to build against this, ipa-memberof.c needs to be able to use the public api or the private one.

Rich Megginson • 15 years ago

2d588a8

Add two now options, --addattr and --setattr, to allow arbitrary attributes to be added and set when a new user or group is created.

Rob Crittenden • 15 years ago

8f639ea

Make check_inst() a standalone function in bindinstance.

Rob Crittenden • 15 years ago

165d26c

Actually pass along the verbose option to IPAClient.

Rob Crittenden • 15 years ago

e3ba80e

Fix typo in log statement

Rob Crittenden • 15 years ago

8f6303a

Make ipa_kpasswd listen on each single interface explicitly

Simo Sorce • 15 years ago

4f81c2f

Use openldap libraries by default as mozldap libs seem to break

Simo Sorce • 15 years ago

8fb4809

Fix crash bug in ipa_kpasswd

Simo Sorce • 15 years ago

dc7d62d

Now that admin is in the common users tree make the nss_ldap

Simo Sorce • 15 years ago

8f082f2

Fix the case where domain != lower(REALM)

Simo Sorce • 15 years ago

53afb67

Set default logging level to INFO (still logs to Apache)

Rob Crittenden • 15 years ago

c5d6ad5

Add python-configobj as a Requires and do some other specfile cleanups.

Rob Crittenden • 15 years ago

0f9b944

Use a value that is explicitly 64bit on all architectures

Simo Sorce • 15 years ago

f32f8d6

Move admin into cn=users,cn=accounts

Simo Sorce • 15 years ago

3931d1d

Don't make the rpm %post fail just because the server has never been

Simo Sorce • 15 years ago

0695649

freeipa

Source Code

Commits 896