public/freeipa
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
ff41a09e363c90e510697c6c7ae8d853d6a98b21
freeipa/install/share
T
History
Christian Heimes 45b8cc1d83 Increase default key size for CA to 3072 bits 
The signing key for IPA's CA certificate now uses a 3072 bit RSA key by
default.

According to https://www.keylength.com/, NIST 800-57 Part 1 Rev. 4
recommends 3072 bit RSA keys for keys that are used beyond 2030 for 128 bit
strength.

Fixes: https://pagure.io/freeipa/issue/6790
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
2019-04-16 16:51:40 +02:00
..
advise
Build: remove incorrect use of MAINTAINERCLEANFILES
2016-11-16 09:12:07 +01:00
profiles
Restore old version of caIPAserviceCert for upgrade only
2017-08-14 19:25:59 +02:00
schema.d
Build: remove incorrect use of MAINTAINERCLEANFILES
2016-11-16 09:12:07 +01:00
05rfc2247.ldif
Remove references to GPL v2.0 license
2015-02-20 15:40:42 +01:00
15rfc2307bis.ldif
Add formerly update-only schema
2013-11-18 16:54:21 +01:00
15rfc4876.ldif
Add formerly update-only schema
2013-11-18 16:54:21 +01:00
60basev2.ldif
idviews: Add necessary schema for the ID views
2014-09-30 10:42:06 +02:00
60basev3.ldif
Short name resolution: introduce the required schema
2017-03-14 18:37:10 +01:00
60certificate-profiles.ldif
Add 'ca' plugin
2016-06-15 07:13:38 +02:00
60ipaconfig.ldif
Unify capitalization of attribute names in schema files
2013-11-18 16:54:22 +01:00
60ipadns.ldif
DNS: Support URI resource record type
2016-10-11 16:48:47 +02:00
60ipapk11.ldif
DNSSEC: schema
2014-10-21 12:23:03 +02:00
60kerberos.ldif
ipa_kdb: add krbPrincipalAuthInd handling
2016-05-02 19:15:45 +02:00
60samba.ldif
Make schema files conform to new updater
2013-11-18 16:54:21 +01:00
61kerberos-ipav3.ldif
mark 'ipaKrbPrincipalAlias' attribute as deprecated in schema
2016-06-23 09:48:06 +02:00
65ipacertstore.ldif
Add LDAP schema for certificate store.
2014-07-30 16:04:21 +02:00
65ipasudo.ldif
Update X-ORIGIN for 4.0
2014-07-01 13:57:06 +02:00
70ipaotp.ldif
Revert "Make all ipatokenTOTP attributes mandatory"
2015-01-21 09:20:15 +01:00
70topology.ldif
handle multiple managed suffixes
2015-10-15 14:24:33 +02:00
71idviews.ldif
idviews: Add user certificate attribute to user ID overrides
2016-05-06 07:12:01 +02:00
72domainlevels.ldif
Add Domain Level feature
2015-05-26 11:59:47 +00:00
73certmap.ldif
Support for Certificate Identity Mapping
2017-03-02 15:09:42 +01:00
anon-princ-aci.ldif
Use Anonymous user to obtain FAST armor ccache
2017-02-15 07:13:37 +01:00
automember.ldif
34 Create FreeIPA CLI Plugin for the 389 Auto Membership plugin
2011-08-31 09:49:43 +02:00
bind.named.conf.template
named.conf: Disable duplicate zone on debian, and modify data dir
2018-05-29 17:03:56 +02:00
bootstrap-template.ldif
Create systemd-user HBAC service and rule
2019-01-11 16:45:05 +01:00
ca-topology.uldif
Revert "upgrade: add replica bind DN group check interval to CA topology config"
2016-12-09 15:47:13 +01:00
certmap.conf.template
Define template version in certmap.conf
2017-03-01 12:46:50 +01:00
custodia.conf.template
Backup ipa-custodia conf and keys
2017-11-13 18:10:54 +01:00
default-aci.ldif
aci: replace per-server ACIs with ipaserver-based ACIs
2015-12-07 08:13:23 +01:00
default-hbac.ldif
Fix systemd-user HBAC rule
2019-01-15 14:29:22 -05:00
default-smb-group.ldif
Change DNA magic value to -1 to make UID 999 usable
2013-03-11 17:07:07 +01:00
default-trust-view.ldif
idviews: Add Default Trust View as part of adtrustinstall
2014-09-30 10:42:06 +02:00
delegation.ldif
DNS Locations: Always create DNS related privileges
2016-06-03 15:58:21 +02:00
dna.ldif
Moved update of DNA plugin among update plugins
2016-11-11 12:13:56 +01:00
dns.ldif
DNS: Support URI resource record type
2016-10-11 16:48:47 +02:00
dnssec.ldif
DNSSEC: DNS key synchronization daemon
2014-10-21 12:23:03 +02:00
domainlevel.ldif
Add Domain Level feature
2015-05-26 11:59:47 +00:00
ds-ipa-env.conf.template
Move DS's Kerberos env vars to unit file
2019-04-02 19:35:38 +02:00
ds-nfiles.ldif
Autotune directory server to use a greater number of files
2010-11-22 12:42:16 -05:00
entryusn.ldif
Address entryusn initialization on replica installation
2011-01-28 13:58:43 -05:00
gssapi.login
Change session handling
2017-02-15 07:13:37 +01:00
gssproxy.conf.template
Add options to allow ticket caching
2017-03-16 13:10:37 +01:00
host_nis_groups.ldif
Move Managed Entries into their own container in the replicated space.
2011-09-12 16:28:27 -04:00
indices.ldif
Add index on idnsName
2019-01-03 12:44:10 +01:00
ipa-httpd-wsgi.conf.template
Replace wsgi package conflict with config file
2018-02-09 08:28:11 +01:00
ipa-httpd.conf.template
Require UTF-8 fs encoding
2017-11-21 16:13:28 +01:00
ipa-kdc-proxy.conf.template
Don't use deprecated Apache Access options.
2018-11-15 17:52:10 -05:00
ipa-pki-proxy.conf.template
Redirect CRL requests to the http port, not the https port
2018-03-16 07:42:07 +01:00
ipa-rewrite.conf.template
Move config templates from install/conf to install/share
2018-02-09 09:14:22 +01:00
ipa.conf.template
Don't use deprecated Apache Access options.
2018-11-15 17:52:10 -05:00
ipaca_customize.ini
Increase default key size for CA to 3072 bits
2019-04-16 16:51:40 +02:00
ipaca_default.ini
Simplify and consolidate ipaca.ini
2019-04-10 13:43:23 +02:00
ipaca_softhsm2.ini
Add pki.ini override option
2019-04-10 13:43:23 +02:00
ipakrb5.aug
install: introduce generic Kerberos Augeas lens
2017-05-19 12:31:24 +02:00
kdc_extensions.template
Add support for configuring KDC certs for PKINIT
2010-11-18 15:09:36 -05:00
kdc_req.conf.template
Add support for configuring KDC certs for PKINIT
2010-11-18 15:09:36 -05:00
kdc.conf.template
Enable SPAKE support using krb5.conf.d snippet
2018-04-28 16:35:16 +02:00
kdcproxy-disable.uldif
Provide Kerberos over HTTP (MS-KKDCP)
2015-06-24 10:43:58 +02:00
kdcproxy-enable.uldif
Provide Kerberos over HTTP (MS-KKDCP)
2015-06-24 10:43:58 +02:00
kdcproxy.conf
Provide Kerberos over HTTP (MS-KKDCP)
2015-06-24 10:43:58 +02:00
kdcproxy.wsgi
Replace hard-coded kdcproxy path with WSGI script
2017-04-12 13:05:23 +02:00
kerberos.ldif
Use only AES enctypes by default
2016-01-13 15:24:53 +01:00
krb5.conf.template
install: do not assume /etc/krb5.conf.d exists
2017-06-28 15:44:51 +02:00
krb5.ini.template
Set master_kdc and dns_lookup_kdc to true
2012-09-19 20:47:12 -04:00
krb.con.template
Mass tree reorganization for IPAv2. To view previous history of files use:
2009-02-03 15:27:14 -05:00
krbrealm.con.template
Mass tree reorganization for IPAv2. To view previous history of files use:
2009-02-03 15:27:14 -05:00
Makefile.am
Add pki.ini override option
2019-04-10 13:43:23 +02:00
managed-entries.ldif
Move Managed Entries into their own container in the replicated space.
2011-09-12 16:28:27 -04:00
master-entry.ldif
Add Domain Level feature
2015-05-26 11:59:47 +00:00
memberof-conf.ldif
Display user and host membership in netgroups.
2010-11-24 08:38:41 -05:00
memberof-task.ldif
Wait for memberof task and DS to start before proceeding in installation.
2011-04-22 11:43:50 +02:00
memcache-remove.uldif
Change session handling
2017-02-15 07:13:37 +01:00
min-ssf.ldif
Require a minimum SASL security factor of 56
2019-04-03 15:16:21 +02:00
modrdn-krbprinc.ldif
add krbCanonicalName to attributes watched by MODRDN plugin
2016-06-23 09:48:06 +02:00
nis-update.uldif
Upgrade: Fix upgrade of NIS Server configuration
2016-01-11 09:45:54 +01:00
nis.uldif
Enable transactions by default, make password and modrdn TXN-aware
2012-11-21 14:55:12 +01:00
opendnssec_conf.template
Use ODS_USER/ODS_GROUP in opendnssec_conf.template
2016-03-23 13:32:55 +01:00
opendnssec_kasp.template
DNSSEC: update OpenDNSSEC KASP configuration
2015-05-19 12:50:56 +00:00
referint-conf.ldif
Update referential integrity config for DS 1.3.3
2014-09-12 17:42:08 +02:00
replica-acis.ldif
fix permission: Read Replication Agreements
2016-02-25 14:30:01 +01:00
replica-automember.ldif
34 Create FreeIPA CLI Plugin for the 389 Auto Membership plugin
2011-08-31 09:49:43 +02:00
replica-prevent-time-skew.ldif
ds: ignore time skew during initial replication step
2017-10-19 17:48:58 +03:00
repoint-managed-entries.ldif
Move Managed Entries into their own container in the replicated space.
2011-09-12 16:28:27 -04:00
root-autobind.ldif
Remove root autobind search restriction, fix upgrade logging & error handling.
2011-06-13 09:51:05 +02:00
sasl-mapping-fallback.ldif
Enable SASL mapping fallback.
2013-06-27 17:06:51 +02:00
schema-update.ldif
Fix nsslapdPlugin object class after initial replication.
2013-09-10 09:49:43 +02:00
smb.conf.empty
Add trust management for Active Directory trusts
2012-06-07 09:39:09 +02:00
smb.conf.template
adtrust: remove FILE: prefix from 'dedicated keytab file' in smb.conf
2016-12-12 16:39:32 +01:00
sudobind.ldif
Create default disabled sudo bind user
2011-02-23 15:32:24 -05:00
topology-entries.ldif
rename topology suffixes to "domain" and "ca"
2015-12-04 12:59:21 +01:00
unique-attributes.ldif
Server Upgrade: Fix uniqueness plugins
2015-05-19 12:45:41 +00:00
user_private_groups.ldif
Move Managed Entries into their own container in the replicated space.
2011-09-12 16:28:27 -04:00
uuid.ldif
DNSSEC: DNS key synchronization daemon
2014-10-21 12:23:03 +02:00
vault.ldif
install: support KRA update
2015-09-17 14:55:54 +02:00
wsgi.py
Address inconsistent-return-statements
2018-11-13 13:37:58 +01:00