Commit Graph

117 Commits (ed622a01c5f199a186ced3870f8a27ac294c6988)

Author SHA1 Message Date
Timothy Pearson f0eeda5dc8 Allow CRL URL to be set via configuration file 10 years ago
Timothy Pearson 6df22c8ca2 Fix up Kerberos PKI certificate generation 10 years ago
Timothy Pearson d6f004658d Allow certificate expiry to be set 10 years ago
Timothy Pearson f4afc1290d Extend CA expiry to 1 year 10 years ago
Timothy Pearson 8b16aef38d Fix incorrect login causing PAM fatal error message 10 years ago
Timothy Pearson bea400f197 Fix security hole when Kerberos credential caching is enabled
The prior PAM stack configuration, while unfortunately present in many online examples, allows storing of an arbitrary cached password for non-Kerberos users by simply entering it twice
11 years ago
Timothy Pearson 5bfd539b84 Make bonding and unbonding methods slightly more robust 12 years ago
Timothy Pearson 571e1739fb Fix LDAP CA root file configuration 12 years ago
Timothy Pearson 39c401b796 Look for CA file in correct location on bonded machines 12 years ago
Timothy Pearson 2ac300ccc2 Do not replicate olcGlobal by default 12 years ago
Timothy Pearson 3729eac510 Fix incorrect certificate CA file in ldap client configuration 12 years ago
Timothy Pearson bac7789f94 Use shared realm certificate file name to allow syncrepl to work 12 years ago
Timothy Pearson a512090138 Use more precise syncrepl configuration 12 years ago
Timothy Pearson a257ac4ffe Fix failure to use provided error string handler in getRealmCAMaster 12 years ago
Timothy Pearson c5ae1e593d Fix syncrepl retry timeout and enable hdb replication 12 years ago
Timothy Pearson a9affe1102 Properly set up syncrepl 12 years ago
Timothy Pearson c8902fca04 Add missing data fields to LDAPMasterReplicationInfo structure 12 years ago
Timothy Pearson 8a439f8521 Add a number of methods to enable multi-master replication 12 years ago
Timothy Pearson 5b8ec508a0 Fix failure when long Kerberos commands are used
This failure was due to an obscure ASCII sequence used in the output of kadmin
12 years ago
Timothy Pearson 8899bee01d Fix cron script failure 12 years ago
Darrell Anderson 91573227c6 Cleanup output clutter. 12 years ago
Timothy Pearson 3f8b38c5f2 Add paged search capability 13 years ago
Timothy Pearson 98d9e442c4 Add ability to control PAM options including credential caching and home directory creation 13 years ago
Timothy Pearson 52d15ff717 Reload OpenLDAP when certificate file changes 13 years ago
Timothy Pearson 1e9b683727 Set proper permissions on root certificate files 13 years ago
Timothy Pearson f101efbd4d Add exportKeytabForPrincipal method 13 years ago
Timothy Pearson 54f609f3da Merge branch 'master' of http://scm.trinitydesktop.org/scm/git/libtdeldap 13 years ago
Timothy Pearson d1764a4dae Add new machine add method
Add stubs for machine and service modification methods
13 years ago
Timothy Pearson 42072e938e Set executable flag on cron scripts 13 years ago
Timothy Pearson fdef66d8f2 Fix kinit and ktutil log output 13 years ago
Timothy Pearson fae0948a28 Move core code from the bonding utility to this library 13 years ago
Timothy Pearson e0f5e6ac4e Fix FBTFS 13 years ago
Timothy Pearson c2654f5408 Fix unusual glitch caused by inadvertent double application of a patch 13 years ago
Timothy Pearson 9d5bebacf3 Move bonding routines into core library 13 years ago
Timothy Pearson 660b499a22 Remove user from member groups before deletion 13 years ago
Timothy Pearson 0794d3cc44 Fix FTBFS with older OpenLDAP versions 13 years ago
Timothy Pearson 6153e00921 Rename additional header files to avoid conflicts with KDE4 13 years ago
Timothy Pearson 9970d64621 Rename common header files for consistency with class renaming 13 years ago
Timothy Pearson ebe5fa27bf Do not use GUI dialog to prompt for password when operating in CLI mode 13 years ago
Timothy Pearson bdb1c6b002 Merge branch 'master' of http://scm.trinitydesktop.org/scm/git/libtdeldap 13 years ago
Timothy Pearson 9e61d1e26b Obtain user name and realm from SASL on GSSAPI authentication success 13 years ago
Timothy Pearson 20c48849ea Fix klist failure 13 years ago
Timothy Pearson a3118cb55b Update library to allow usage from command line applications 13 years ago
Timothy Pearson e4aee49e75 Rename many classes and header files to avoid conflicts with KDE4 13 years ago
Timothy Pearson 98058c6c16 Fix potential kadmin failures
Export static kadmin process read method
13 years ago
Timothy Pearson 5ac43b8c56 Create missing symlink for nss configuration file
Clean up build warnings and be verbose about configuration failures
13 years ago
Timothy Pearson 8113210613 Fix kadmin interface 13 years ago
Timothy Pearson 94e30a55ce Prevent runaway loop on kinit termination 13 years ago
Timothy Pearson ddd6159e47 Make kadmin communication more robust 13 years ago
Timothy Pearson 3ba9d6e852 Add service handling routines 13 years ago
Timothy Pearson 7982753d88 Final upload from initial development system 13 years ago
Timothy Pearson a90355f364 Add prc cron method 13 years ago
Timothy Pearson 477d5b0abb Add kgetcred integration 13 years ago
Timothy Pearson 072098e10d Add a variety of ticket management functions 13 years ago
Timothy Pearson df417d4eda Move more routines into this library 13 years ago
Timothy Pearson 68d486e224 Add routine to create certificate 13 years ago
Timothy Pearson 86e14dadc9 Add certificte and sudo handling routines 13 years ago
Timothy Pearson 16fb6be0db Enable SASL authentication 13 years ago
Timothy Pearson c1419e3a4c Preferentially use TLS when connecting to LDAP server 13 years ago
Timothy Pearson 4ada10136e Add certfile write 13 years ago
Timothy Pearson c330f85be8 Activate new user attributes 13 years ago
Timothy Pearson 45427285f4 Add error likely cause routine 13 years ago
Timothy Pearson d6a5b810df Add return codes for basic functions 13 years ago
Timothy Pearson 57baf9d811 Update library for CLI use 13 years ago
Timothy Pearson 50a7026e7f Moved realm conffile writing to this library 13 years ago
Timothy Pearson fb7be0231c Add kerberos rename method for RC setup 13 years ago
Timothy Pearson fe3bd0c6c7 Added common directories 13 years ago