Luke Howard c6bf100b43 kadm5: move password quality checks out of daemons and into libkadm5 ...

Note that this has a slight behavior change to c89d3f3b in order to continue
allow kadmin in local mode to bypass password quality checks. Password quality
checks are always bypassed if the *client* kadmin principal is kadmin/admin,
i.e. that of the kadmin service itself. This is the case when running kadmin in
local mode. As this is the equivalent of a superuser account, one would
anticipate that deployments would use specific administrator instances for
appropriate ACLs for day-to-day administration; operations by these will be
subject to password quality checks if enforce_on_admin_set is TRUE, or if the
user is changing their own password.

2018-12-26 11:04:05 -06:00

..

acl.c

kadm5: move password quality checks out of daemons and into libkadm5

2018-12-26 11:04:05 -06:00

ad.c

lib/kadm5: use krb5_enomem() where possible

2018-12-25 16:57:55 -06:00

admin.h

Automatically upgrade iprop logs to add uber rec

2016-02-26 19:10:14 -06:00

bump_pw_expire.c

remove trailing whitespace

2008-09-13 09:21:03 +00:00

ChangeLog

switch to utf8 encoding of all files

2008-09-13 08:53:55 +00:00

check-cracklib.pl

Remove print that fools kpasswdd.

2010-07-23 10:42:34 -07:00

chpass_c.c

lib/kadm5: use krb5_enomem() where possible

2018-12-25 16:57:55 -06:00

chpass_s.c

kadm5: move password quality checks out of daemons and into libkadm5

2018-12-26 11:04:05 -06:00

client_glue.c

remove trailing whitespace

2008-09-13 09:21:03 +00:00

common_glue.c

lib/kadm5: use krb5_enomem() where possible

2018-12-25 16:57:55 -06:00

context_s.c

kadm5: pre/post-commit plugin hook for kadm5 update operations (#397)

2018-12-26 11:04:05 -06:00

create_c.c

lib/kadm5: use krb5_enomem() where possible

2018-12-25 16:57:55 -06:00

create_s.c

kadm5: move password quality checks out of daemons and into libkadm5

2018-12-26 11:04:05 -06:00

default_keys.c

Reverse order of n_ks_tuple and ks_tuple in hdb_generate_key_set().

2011-11-29 14:47:37 -06:00

delete_c.c

lib/kadm5: use krb5_enomem() where possible

2018-12-25 16:57:55 -06:00

delete_s.c

kadm5: pre/post-commit plugin hook for kadm5 update operations (#397)

2018-12-26 11:04:05 -06:00

destroy_c.c

kadm5: use rk_closesocket to close sockets

2014-02-03 15:40:32 -05:00

destroy_s.c

kadm5: pre/post-commit plugin hook for kadm5 update operations (#397)

2018-12-26 11:04:05 -06:00

ent_setup.c

Add require-pwchange flag to HDB and honour it if present in mit-db:.

2012-02-27 10:19:54 +00:00

error.c

remove trailing whitespace

2008-09-13 09:21:03 +00:00

flush_c.c

remove trailing whitespace

2008-09-13 09:21:03 +00:00

flush_s.c

remove trailing whitespace

2008-09-13 09:21:03 +00:00

flush.c

remove trailing whitespace

2008-09-13 09:21:03 +00:00

free.c

Fix kadm5 error cleanup

2016-11-11 01:38:41 -05:00

get_c.c

lib/kadm5: use krb5_enomem() where possible

2018-12-25 16:57:55 -06:00

get_princs_c.c

lib/kadm5: use krb5_enomem() where possible

2018-12-25 16:57:55 -06:00

get_princs_s.c

lib/kadm5: use krb5_enomem() where possible

2018-12-25 16:57:55 -06:00

get_s.c

lib/kadm5: use krb5_enomem() where possible

2018-12-25 16:57:55 -06:00

init_c.c

Remove get_default_username()

2018-12-25 22:11:19 -06:00

init_s.c

Don't lose error status in kadm5_s_init_with_context

2018-08-05 14:37:04 -04:00

iprop-commands.in

Two-phase HDB commit via iprop log, + GC for log

2016-02-26 00:55:33 -06:00

iprop-log-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

iprop-log.8

Misc fixes to man pages

2017-03-13 18:39:41 -04:00

iprop-log.c

Round #2 of scan-build warnings cleanup

2016-11-16 17:03:14 -06:00

iprop.8

Misc fixes to man pages

2017-03-13 18:39:41 -04:00

iprop.h

ipropd-master/slave: enhancements and bug fixes

2016-02-26 00:59:04 -06:00

ipropd_common.c

Round #1 of scan-build warnings cleanup

2016-11-15 21:27:20 -06:00

ipropd_master.c

lib/kadm5: use krb5_enomem() where possible

2018-12-25 16:57:55 -06:00

ipropd_slave.c

lib/kadm5: use krb5_enomem() where possible

2018-12-25 16:57:55 -06:00

ipropd-master-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

ipropd-slave-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

kadm5_err.et

kadm5: pre/post-commit plugin hook for kadm5 update operations (#397)

2018-12-26 11:04:05 -06:00

kadm5_locl.h

Use heim_assert() instead of assert()

2011-07-24 11:10:37 -05:00

kadm5_pwcheck.3

Clarify documentation of password quality check modules

2010-01-15 23:33:25 +00:00

kadm5-hook.h

kadm5: pre/post-commit plugin hook for kadm5 update operations (#397)

2018-12-26 11:04:05 -06:00

kadm5-pwcheck.h

remove trailing whitespace

2008-09-13 09:21:03 +00:00

keys.c

Fix incorrect key history check optimization. (NOT TESTED)

2011-07-22 16:07:07 -05:00

libkadm5srv-exports.def

Two-phase HDB commit via iprop log, + GC for log

2016-02-26 00:55:33 -06:00

libkadm5srv-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

log.c

lib/kadm5: use krb5_enomem() where possible

2018-12-25 16:57:55 -06:00

Makefile.am

kadm5: pre/post-commit plugin hook for kadm5 update operations (#397)

2018-12-26 11:04:05 -06:00

marshall.c

kadm5: Add functions to check for bogus keys

2015-03-14 16:08:34 -04:00

modify_c.c

lib/kadm5: use krb5_enomem() where possible

2018-12-25 16:57:55 -06:00

modify_s.c

kadm5: pre/post-commit plugin hook for kadm5 update operations (#397)

2018-12-26 11:04:05 -06:00

NTMakefile

kadm5: pre/post-commit plugin hook for kadm5 update operations (#397)

2018-12-26 11:04:05 -06:00

password_quality.c

Close memory leak in external_passwd_quality

2017-09-25 18:18:55 -05:00

private.h

kadm5: pre/post-commit plugin hook for kadm5 update operations (#397)

2018-12-26 11:04:05 -06:00

privs_c.c

lib/kadm5: use krb5_enomem() where possible

2018-12-25 16:57:55 -06:00

privs_s.c

remove trailing whitespace

2008-09-13 09:21:03 +00:00

randkey_c.c

lib/kadm5: use krb5_enomem() where possible

2018-12-25 16:57:55 -06:00

randkey_s.c

kadm5: pre/post-commit plugin hook for kadm5 update operations (#397)

2018-12-26 11:04:05 -06:00

rename_c.c

lib/kadm5: use krb5_enomem() where possible

2018-12-25 16:57:55 -06:00

rename_s.c

kadm5: pre/post-commit plugin hook for kadm5 update operations (#397)

2018-12-26 11:04:05 -06:00

sample_hook.c

kadm5: pre/post-commit plugin hook for kadm5 update operations (#397)

2018-12-26 11:04:05 -06:00

sample_passwd_check.c

remove trailing whitespace

2008-09-13 09:21:03 +00:00

send_recv.c

lib/kadm5: use krb5_enomem() where possible

2018-12-25 16:57:55 -06:00

server_glue.c

remove trailing whitespace

2008-09-13 09:21:03 +00:00

server_hooks.c

kadm5: pre/post-commit plugin hook for kadm5 update operations (#397)

2018-12-26 11:04:05 -06:00

set_keys.c

lib/kadm5: use krb5_enomem() where possible

2018-12-25 16:57:55 -06:00

set_modifier.c

lib/kadm5: use krb5_enomem() where possible

2018-12-25 16:57:55 -06:00

setkey3_s.c

kadm5: pre/post-commit plugin hook for kadm5 update operations (#397)

2018-12-26 11:04:05 -06:00

test_pw_quality.c

Turn on -Wextra -Wno-sign-compare -Wno-unused-paramter and fix issues.

2012-02-20 19:45:41 +00:00

version-script-client.map

kadm5: Add functions to check for bogus keys

2015-03-14 16:08:34 -04:00

version-script.map

Two-phase HDB commit via iprop log, + GC for log

2016-02-26 00:55:33 -06:00