[Freeipa-devel] [PATCHES 0069-0077] support for proper Kerberos principal canonicalization

[Martin Babinsky]

These patches implement the plumbing required to properly support 
canonicalization of Kerberos principals (
https://fedorahosted.org/freeipa/ticket/3864).

Setting multiple principal aliases on hosts/services is beyond the scope 
of this patchset and should be done after these patches are pushed.

I will try to send some tests for the patches later this week.

Please review the hell out of them.

-- 
Martin^3 Babinsky
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mbabinsk-0077-account-for-added-krbcanonicalname-attribute-during-.patch
Type: text/x-patch
Size: 7146 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20151005/f1cdabcc/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mbabinsk-0076-set-krbcanonicalname-on-host-entry-during-krbinstanc.patch
Type: text/x-patch
Size: 1098 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20151005/f1cdabcc/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mbabinsk-0075-IPA-API-set-krbcanonicalname-instead-of-ipakrbprinci.patch
Type: text/x-patch
Size: 6419 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20151005/f1cdabcc/attachment-0002.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mbabinsk-0074-ipa-enrollment-set-krbCanonicalName-attribute-on-enr.patch
Type: text/x-patch
Size: 1961 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20151005/f1cdabcc/attachment-0003.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mbabinsk-0073-ipa-kdb-set-krbCanonicalName-when-creating-new-princ.patch
Type: text/x-patch
Size: 1503 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20151005/f1cdabcc/attachment-0004.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mbabinsk-0072-add-krbCanonicalName-to-attributes-watched-by-MODRDN.patch
Type: text/x-patch
Size: 1189 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20151005/f1cdabcc/attachment-0005.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mbabinsk-0071-add-case-insensitive-matching-rule-to-krbprincipalna.patch
Type: text/x-patch
Size: 1626 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20151005/f1cdabcc/attachment-0006.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mbabinsk-0070-mark-ipaKrbPrincipalAlias-attribute-as-deprecated-in.patch
Type: text/x-patch
Size: 1389 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20151005/f1cdabcc/attachment-0007.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mbabinsk-0069-perform-case-insensitive-principal-search-when-canon.patch
Type: text/x-patch
Size: 2329 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20151005/f1cdabcc/attachment-0008.bin>