30b251b05b
Clean up revoked certificates when done updating CRL
9 years ago
ba7bc5afac
Fix up certificate expiry detection
9 years ago
c714661bc9
Add certificate store attribute access method
9 years ago
521c4ed590
Add additional CRL manipulation methods
9 years ago
0fce8b42b6
Store CRL expiry in LDAP
9 years ago
efb81441de
Add CRL generation
9 years ago
a97c0c3d54
Implement several methods required for PKI certificate management
9 years ago
54d8d2580c
Extend user key and certificate generation methods
9 years ago
0a81ad9d6e
Fix CN/DN ordering
9 years ago
bc95fa92b0
Properly set CRL URL and fix up a few other glitches
9 years ago
f0eeda5dc8
Allow CRL URL to be set via configuration file
9 years ago
6df22c8ca2
Fix up Kerberos PKI certificate generation
9 years ago
d6f004658d
Allow certificate expiry to be set
9 years ago
f4afc1290d
Extend CA expiry to 1 year
9 years ago
8b16aef38d
Fix incorrect login causing PAM fatal error message
9 years ago
bea400f197
Fix security hole when Kerberos credential caching is enabled
...
The prior PAM stack configuration, while unfortunately present in many online examples, allows storing of an arbitrary cached password for non-Kerberos users by simply entering it twice
11 years ago
5bfd539b84
Make bonding and unbonding methods slightly more robust
11 years ago
571e1739fb
Fix LDAP CA root file configuration
11 years ago
39c401b796
Look for CA file in correct location on bonded machines
11 years ago
ce1a870096
Add missing LDFLAGS causing FTBFS
11 years ago
2ac300ccc2
Do not replicate olcGlobal by default
12 years ago
3729eac510
Fix incorrect certificate CA file in ldap client configuration
12 years ago
bac7789f94
Use shared realm certificate file name to allow syncrepl to work
12 years ago
a512090138
Use more precise syncrepl configuration
12 years ago
a257ac4ffe
Fix failure to use provided error string handler in getRealmCAMaster
12 years ago
c5ae1e593d
Fix syncrepl retry timeout and enable hdb replication
12 years ago
a9affe1102
Properly set up syncrepl
12 years ago
c8902fca04
Add missing data fields to LDAPMasterReplicationInfo structure
12 years ago
8a439f8521
Add a number of methods to enable multi-master replication
12 years ago
5b8ec508a0
Fix failure when long Kerberos commands are used
...
This failure was due to an obscure ASCII sequence used in the output of kadmin
12 years ago
8899bee01d
Fix cron script failure
12 years ago
91573227c6
Cleanup output clutter.
12 years ago
3f8b38c5f2
Add paged search capability
12 years ago
98d9e442c4
Add ability to control PAM options including credential caching and home directory creation
12 years ago
52d15ff717
Reload OpenLDAP when certificate file changes
12 years ago
1e9b683727
Set proper permissions on root certificate files
12 years ago
f101efbd4d
Add exportKeytabForPrincipal method
12 years ago
54f609f3da
Merge branch 'master' of http://scm.trinitydesktop.org/scm/git/libtdeldap
12 years ago
d1764a4dae
Add new machine add method
...
Add stubs for machine and service modification methods
12 years ago
42072e938e
Set executable flag on cron scripts
12 years ago
fdef66d8f2
Fix kinit and ktutil log output
12 years ago
fae0948a28
Move core code from the bonding utility to this library
12 years ago
e0f5e6ac4e
Fix FBTFS
12 years ago
c2654f5408
Fix unusual glitch caused by inadvertent double application of a patch
12 years ago
9d5bebacf3
Move bonding routines into core library
12 years ago
660b499a22
Remove user from member groups before deletion
12 years ago
298b514806
Remove incorrect module flag from Makefile.am
12 years ago
0794d3cc44
Fix FTBFS with older OpenLDAP versions
12 years ago
6153e00921
Rename additional header files to avoid conflicts with KDE4
12 years ago
9970d64621
Rename common header files for consistency with class renaming
12 years ago
ebe5fa27bf
Do not use GUI dialog to prompt for password when operating in CLI mode
12 years ago
bdb1c6b002
Merge branch 'master' of http://scm.trinitydesktop.org/scm/git/libtdeldap
12 years ago
9e61d1e26b
Obtain user name and realm from SASL on GSSAPI authentication success
12 years ago
20c48849ea
Fix klist failure
12 years ago
a3118cb55b
Update library to allow usage from command line applications
12 years ago
e4aee49e75
Rename many classes and header files to avoid conflicts with KDE4
12 years ago
b8e46819b8
Fix up remaining references to -lkio
12 years ago
98058c6c16
Fix potential kadmin failures
...
Export static kadmin process read method
12 years ago
5ac43b8c56
Create missing symlink for nss configuration file
...
Clean up build warnings and be verbose about configuration failures
12 years ago
8113210613
Fix kadmin interface
12 years ago
ee1a119fc3
Fix FTBFS
12 years ago
dc34ab4f8f
Add versioning information to shared library
12 years ago
94e30a55ce
Prevent runaway loop on kinit termination
13 years ago
ddd6159e47
Make kadmin communication more robust
13 years ago
3ba9d6e852
Add service handling routines
13 years ago
7982753d88
Final upload from initial development system
13 years ago
a90355f364
Add prc cron method
13 years ago
477d5b0abb
Add kgetcred integration
13 years ago
072098e10d
Add a variety of ticket management functions
13 years ago
df417d4eda
Move more routines into this library
13 years ago
68d486e224
Add routine to create certificate
13 years ago
86e14dadc9
Add certificte and sudo handling routines
13 years ago
16fb6be0db
Enable SASL authentication
13 years ago
c1419e3a4c
Preferentially use TLS when connecting to LDAP server
13 years ago
4ada10136e
Add certfile write
13 years ago
c330f85be8
Activate new user attributes
13 years ago
45427285f4
Add error likely cause routine
13 years ago
d6a5b810df
Add return codes for basic functions
13 years ago
57baf9d811
Update library for CLI use
13 years ago
50a7026e7f
Moved realm conffile writing to this library
13 years ago
fb7be0231c
Add kerberos rename method for RC setup
13 years ago
732baa0f27
Install header files
13 years ago
fe3bd0c6c7
Added common directories
13 years ago
Timothy Pearson
Francois Andriot
Darrell Anderson