Alexander Bokovoy 9ecbdd8e59 ipa-kdb: enforce SID checks when generating PAC ...

Check that a domain SID and a user SID in the PAC passed to us are what
they should be for the local realm's principal.

Fixes: https://pagure.io/freeipa/issue/9031

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Robert Crittenden <rcritten@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>

2021-11-11 16:11:05 -05:00

..

dnssec

dnssec: concurrency issue when disabling old replica key

2021-03-10 09:31:43 +02:00

ipa-kdb

ipa-kdb: enforce SID checks when generating PAC

2021-11-11 16:11:05 -05:00

ipa-otpd

ipa-otpd: handle LDAP timeout in a better way

2021-04-23 17:55:50 +02:00

ipa-sam

ipa-sam: return NetBIOS domain name instead of DNS one

2021-02-03 08:58:11 +02:00

ipa-slapi-plugins

extdom: return LDAP_NO_SUCH_OBJECT if domains differ

2021-09-02 20:48:41 +02:00

ipa-version.h.in

Build: move version handling from Makefile to configure

2016-11-09 13:08:32 +01:00

Makefile.am

Build: properly integrate ipa-version.h.in into build system

2016-11-29 15:28:24 +01:00