[Freeipa-devel] [PATCH] Add BIND pre-op for DS->IPA password migration to ipa-pwd-extop DS plugin.

[Rob Crittenden]

Pavel Zuna wrote:
> Re-post from ipa-and-samba-team-list.
> 
> This patch makes DS generate new Kerberos keys for eligible users upon a 
> successful simple bind. We need this for password migration.
> 
> Pavel

Some minor points:

- The comment block of ipa_pwd_pre_bind() doesn't match the code: it 
doesn't add krbPrincipalAux or set the principal name.
- It probably shouldn't use log level SLAPI_LOG_FATAL

rob
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20091118/63cba795/attachment.bin>