Simo Sorce
560b9416f6
Move mspac structure to be a private pointer
...
By keeping it's definition in the mspac file it is easier to modify and make
sure any opertion on it is handled in the same file.
2012-08-02 11:27:52 -04:00
Simo Sorce
f602ad270d
Add support for disabling KDC writes
...
Add two global ipaConfig options to disable undesirable writes that have
performance impact.
The "KDC:Disable Last Success" will disable writing back to ldap the last
successful AS Request time (successful kinit)
The "KDC:Disable Lockout" will disable completely writing back lockout
related data. This means lockout policies will stop working.
https://fedorahosted.org/freeipa/ticket/2734
2012-06-06 22:12:22 -04:00
Simo Sorce
9942a29cab
policy: add function to check lockout policy
...
Fixes: https://fedorahosted.org/freeipa/ticket/2393
2012-02-19 20:43:45 -05:00
Simo Sorce
651f932473
ipa-kdb: add AS auditing support
...
Fixes: https://fedorahosted.org/freeipa/ticket/2334
2012-02-14 18:03:45 -05:00
Simo Sorce
10264c9ea9
ipa-kdb: Add delgation access control support
2011-12-08 17:18:10 -05:00
Simo Sorce
045c7c123e
ipa-kdb: enhance deref searches
...
Allow to deref more than one attribute.
The attrs searched are the same for all deref attributes at this time.
2011-12-08 17:18:10 -05:00
Simo Sorce
18537d55a7
Add support for generating PAC for AS requests for user principals
2011-11-07 14:25:07 -05:00
Simo Sorce
4167ad01d7
ipa-kdb: Properly set password expiration time.
...
We do the policy check so we are the only one that can calculate the new
pwd espiration time.
Fixes: https://fedorahosted.org/freeipa/ticket/1793
2011-09-19 12:28:35 -04:00
Simo Sorce
0d048d7b49
ipa-kdb: add password policy support
...
Use default policy for new principals created by kadmin
2011-08-26 08:24:50 -04:00
Simo Sorce
452fcdccdc
ipa-kdb: implement change_pwd function
2011-08-26 08:24:49 -04:00
Simo Sorce
49c25dbdf5
ipa-kdb: implement function to retrieve password policies
2011-08-26 08:24:49 -04:00
Simo Sorce
0a4f7960b9
ipa-kdb: Get/Store Master Key directly from LDAP
2011-08-26 08:24:49 -04:00
Simo Sorce
e9e426354f
ipa-kdb: add functions to change principals
2011-08-26 08:24:49 -04:00
Simo Sorce
abd424889b
ipa-kdb: functions to get principal
2011-08-26 08:24:49 -04:00
Simo Sorce
46c803a08d
ipa-kdb: add common utility ldap wrapper functions
2011-08-26 08:24:49 -04:00
Simo Sorce
b5ba0f7f48
ipa-kdb: implement get_time function
2011-08-26 08:24:49 -04:00
Simo Sorce
6e010fedaa
ipa-kdb: initialize module functions
...
Initialize module also on ipadb_create invocation. This is what
kdb5_util expects.
2011-08-26 08:24:49 -04:00
Simo Sorce