Alexander Bokovoy 69ae9febfb ipa-kdb: when applying ticket policy, do not deny PKINIT ...

PKINIT differs from other pre-authentication methods by the fact that it
can be matched indepedently of the user authentication types via certmap
plugin in KDC.

Since PKINIT is a strong authentication method, allow its authentication
indicator and only apply the ticket policy.

Fixes: https://pagure.io/freeipa/issue/9485

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Francisco Trivino <ftrivino@redhat.com>

2023-12-22 10:34:19 +01:00

..

dnssec

pylint: remove useless suppression

2023-01-10 08:30:58 +01:00

ipa-kdb

ipa-kdb: when applying ticket policy, do not deny PKINIT

2023-12-22 10:34:19 +01:00

ipa-otpd

ipa-otpd: add passkey_child_debug_level option

2023-06-01 08:20:37 +02:00

ipa-sam

ipa-sam: retrieve trusted domain account credential from the TDO itself

2022-04-13 18:37:12 +02:00

ipa-slapi-plugins

Issue 9497 - update debug logging in ipa_uuid

2023-12-14 09:24:46 +01:00

ipa-version.h.in

Build: move version handling from Makefile to configure

2016-11-09 13:08:32 +01:00

Makefile.am

build: Unify compiler warning flags used

2021-01-15 14:11:56 +01:00