[Freeipa-devel] [PATCHES 0069-0077] support for proper Kerberos principal canonicalization

[Martin Babinsky]

On 10/05/2015 03:00 PM, Martin Babinsky wrote:
> These patches implement the plumbing required to properly support
> canonicalization of Kerberos principals (
> https://fedorahosted.org/freeipa/ticket/3864).
>
> Setting multiple principal aliases on hosts/services is beyond the scope
> of this patchset and should be done after these patches are pushed.
>
> I will try to send some tests for the patches later this week.
>
> Please review the hell out of them.
>
>
>

Long time no see.

I am attaching rebased infrastructure patches which were reviewed and 
tested by David a year ago :). Now that all related DS bugs were fixed 
and the patches still work as expected, we may push them so that the 
plumbing for further work (API for alias handling etc.) is in place.

-- 
Martin^3 Babinsky
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mbabinsk-0069-2-perform-case-insensitive-principal-search-when-canon.patch
Type: text/x-patch
Size: 2329 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20160622/b1179230/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mbabinsk-0070-2-mark-ipaKrbPrincipalAlias-attribute-as-deprecated-in.patch
Type: text/x-patch
Size: 1389 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20160622/b1179230/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mbabinsk-0071-2-add-case-insensitive-matching-rule-to-krbprincipalna.patch
Type: text/x-patch
Size: 1630 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20160622/b1179230/attachment-0002.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mbabinsk-0072-2-add-krbCanonicalName-to-attributes-watched-by-MODRDN.patch
Type: text/x-patch
Size: 1189 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20160622/b1179230/attachment-0003.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mbabinsk-0073-2-ipa-kdb-set-krbCanonicalName-when-creating-new-princ.patch
Type: text/x-patch
Size: 1503 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20160622/b1179230/attachment-0004.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mbabinsk-0074-2-ipa-enrollment-set-krbCanonicalName-attribute-on-enr.patch
Type: text/x-patch
Size: 1961 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20160622/b1179230/attachment-0005.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mbabinsk-0075-2-IPA-API-set-krbcanonicalname-instead-of-ipakrbprinci.patch
Type: text/x-patch
Size: 5229 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20160622/b1179230/attachment-0006.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mbabinsk-0076-2-set-krbcanonicalname-on-host-entry-during-krbinstanc.patch
Type: text/x-patch
Size: 1096 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20160622/b1179230/attachment-0007.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mbabinsk-0077-2-account-for-added-krbcanonicalname-attribute-during-.patch
Type: text/x-patch
Size: 9675 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20160622/b1179230/attachment-0008.bin>