Martin Babinsky f32e0e4e52 do not use trusted forest name to construct domain admin principal ...

When `trust-add` is supplied AD domain admin name without realm component, the
code appends the uppercased AD forest root domain name to construct the full
principal. This can cause authentication error, however, when external trust
with non-root domain is requested.

We should instead use the supplied DNS domain name (if valid) as a realm
component.

https://fedorahosted.org/freeipa/ticket/6277

Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>

2016-08-31 15:07:09 +02:00

..

advise

ipa-advise: correct handling of plugin namespace iteration

2016-07-12 11:02:52 +02:00

install

Raise error when running ipa-adtrust-install with empty netbios--name

2016-08-30 13:21:49 +02:00

plugins

do not use trusted forest name to construct domain admin principal

2016-08-31 15:07:09 +02:00

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

dcerpc.py

trust: make sure external trust topology is correctly rendered

2016-08-22 13:38:18 +02:00

dns_data_management.py

DNS Locations: cleanup of bininstance

2016-06-28 15:23:51 +02:00

rpcserver.py

rpcserver: assume version 1 for unversioned command calls

2016-08-31 14:36:39 +02:00

servroles.py

Introduce "NTP server" role

2016-06-15 13:51:48 +02:00

session.py

session: do not initialize session manager on import

2016-06-30 14:09:24 +02:00

topology.py

Fix topologysuffix-verify failing connections

2016-06-24 13:32:02 +02:00