public/freeipa
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5,502 Commits 9 Branches 0 Tags
476aacd69963dd94de3af3d640fca783d77b4eb8
Commit Graph
7 Commits
Author SHA1 Message Date
Alexander Bokovoy 0840b588d7 Add cifs principal to S4U2Proxy targets only when running ipa-adtrust-install 
Since CIFS principal is generated by ipa-adtrust-install and is only
usable after setting CIFS configuration, there is no need to include it
into default setup.

This should fix upgrades from 2.2 to 3.0 where CIFS principal does not
exist by default.

https://fedorahosted.org/freeipa/ticket/3041
 2012-10-09 18:15:01 -04:00
Alexander Bokovoy 155d1efd48 Add ACI to allow regenerating ipaNTHash from ipasam 
ACI was lacking to allow actually writing MagicRegen into ipaNTHash attribute,

Part 2 of https://fedorahosted.org/freeipa/ticket/3016
 2012-08-22 17:21:27 +03:00
Rob Crittenden fb817d3401 Add per-service option to store the types of PAC it supports 
Create a per-service default as well.

https://fedorahosted.org/freeipa/ticket/2184
 2012-08-01 16:15:51 +02:00
Martin Kosek 32ef4efaca Remove ipaNTHash from global allow ACI 
ipaNTHash contains security sensitive information, it should be hidden just
like other password attributes. As a part of preparation for ticket #2511,
the ACI allowing global access is also updated to hide DNS zones.

https://fedorahosted.org/freeipa/ticket/2856
 2012-06-26 21:28:25 +02:00
Sumit Bose b367c9ee7e Use exop instead of kadmin.local 2012-06-11 09:40:59 +02:00
Alexander Bokovoy bd0d858043 Add trust-related ACIs 
A high-level description of the design and ACIs for trusts is available at
https://www.redhat.com/archives/freeipa-devel/2011-December/msg00224.html
and
https://www.redhat.com/archives/freeipa-devel/2011-December/msg00248.html

Ticket #1731
 2012-06-07 09:39:10 +02:00
Alexander Bokovoy b32204fccc Add separate attribute to store trusted domain SID 
We need two attributes in the ipaNTTrustedDomain objectclass to store different
kind of SID. Currently ipaNTSecurityIdentifier is used to store the Domain-SID
of the trusted domain. A second attribute is needed to store the SID for the
trusted domain user. Since it cannot be derived safely from other values and
since it does not make sense to create a separate object for the user a new
attribute is needed.

https://fedorahosted.org/freeipa/ticket/2191
 2012-06-07 09:39:09 +02:00