Mirror of FreeIPA, an integrated security information management solution
Switch branches/tags
Clone or download
abbra and rcritten ipa-kdb: reduce LDAP operations timeout to 30 seconds
Since LDAP operations used by ipa-kdb driver are synchronous, the
timeout specified here is blocking entire KDC. It is worth reducing the
timeout and since AS REQ processing timeout in KDC is 1 minute, reducing
the timeout for LDAP operations down to 30 seconds allows KDC to
respond promptly in worst case scenario as well.

Fixes: https://pagure.io/freeipa/issue/7217
Reviewed-By: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Robbie Harwood <rharwood@redhat.com>
Latest commit 122f968 Nov 16, 2018
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
asn1 fix minor spelling mistakes May 19, 2017
client Fix ressource leak in client/config.c get_config_entry Oct 23, 2018
contrib Improve Python configuration for LGTM Oct 26, 2018
daemons ipa-kdb: reduce LDAP operations timeout to 30 seconds Nov 16, 2018
doc Have all the scripts run in python 3 by default Feb 15, 2018
init Move ipa's systemd tmpfiles from /var/run to /run Oct 15, 2018
install Don't use deprecated Apache Access options. Nov 15, 2018
ipaclient Allow ipaapi user to access SSSD's info pipe Nov 7, 2018
ipalib rpc: always read response Nov 7, 2018
ipaplatform Remove DS perl paths from debian platform Nov 13, 2018
ipapython certdb: validate server cert signature Nov 14, 2018
ipaserver Don't use deprecated Apache Access options. Nov 15, 2018
ipatests Fix nightly PR CI configuration for Web UI tests Nov 16, 2018
po Update translations from Zanata Nov 13, 2018
pypi Cleanup shebang and executable bit Jul 5, 2018
util Move fips_enabled to a common library to share across different plugins Aug 13, 2018
.freeipa-pr-ci.yaml Making nigthly test definition editable by FreeIPA's contributors Jul 27, 2018
.git-commit-template git-commit-template: update ticket url to use pagure.io instead of fe… Mar 28, 2017
.gitignore Rename Python scripts and add dynamic shebang Aug 23, 2018
.lgtm.yml Improve Python configuration for LGTM Oct 26, 2018
.mailmap Add entry for Serhii to mailmap Oct 5, 2018
.test_runner_config.yaml Update annobin to fix continuous-integration/travis-ci/pr issues Oct 23, 2018
.tox-install.sh tox testing support for client wheel packages Apr 12, 2017
.travis.yml Remove Python 2 support and packages Sep 6, 2018
.travis_run_task.sh Remove Python 2 support and packages Sep 6, 2018
.wheelconstraints.in Use pylint 1.7.5 with fix for bad python3 import Dec 19, 2017
ACI.txt radiusproxy: add permission for reading radius proxy servers Nov 13, 2018
API.txt Find orphan automember rules Oct 10, 2018
BUILD.txt Update builddep command in BUILD.txt Jul 17, 2018
CODE_OF_CONDUCT.md Changing Django's CoC to reflect FreeIPA CoC Mar 26, 2018
COPYING Change FreeIPA license to GPLv3+ Dec 20, 2010
COPYING.openssl Add a clear OpenSSL exception. Feb 23, 2015
Contributors.txt Update list of contributors Oct 5, 2018
Makefile.am Add Coverity Scan target Oct 24, 2018
Makefile.python.am Add PYTHON_INSTALL_EXTRA_OPTIONS and --install-layout=deb Mar 15, 2017
Makefile.pythonscripts.am Generate scripts from templates Aug 23, 2018
README.md Correction of management spelling. Apr 4, 2018
VERSION.m4 Find orphan automember rules Oct 10, 2018
autogen.sh build tweaks - use automake's foreign mode, avoid creating empty file… Nov 29, 2010
configure.ac Remove Python 2 support and packages Sep 6, 2018
freeipa.doap.rdf Adding modified DOAP file Jun 22, 2018
freeipa.spec.in freeipa.spec.in: add BuildRequires for python3-lib389 Nov 16, 2018
ipa.in Rename Python scripts and add dynamic shebang Aug 23, 2018
ipasetup.py.in Address inconsistent-return-statements Nov 13, 2018
make-doc Make an ipa-tests package Jun 17, 2013
make-test Use pytest conftest.py and drop pytest.ini Jan 5, 2017
makeaci.in Remove Python 2 support and packages Sep 6, 2018
makeapi.in Remove Python 2 support and packages Sep 6, 2018
makerpms.sh makerpms.sh: make git checkout optional Aug 18, 2017
pylint_plugins.py Address pylint violations in lite-server Nov 13, 2018
pylintrc Ignore consider-using-enumerate for now Nov 13, 2018
server.m4 Correcting detect typo in server.m4 Apr 5, 2018
tox.ini Ignore W504 code style like in travis config Nov 13, 2018
zanata.xml Zanata: exlude testing ipa.pot file Nov 21, 2016

README.md

FreeIPA Server

FreeIPA allows Linux administrators to centrally manage identity, authentication and access control aspects of Linux and UNIX systems by providing simple to install and use command line and web based management tools.

FreeIPA is built on top of well known Open Source components and standard protocols with a very strong focus on ease of management and automation of installation and configuration tasks.

FreeIPA can seamlessly integrate into an Active Directory environment via cross-realm Kerberos trust or user synchronization.

Benefits

FreeIPA:

  • Allows all your users to access all the machines with the same credentials and security settings
  • Allows users to access personal files transparently from any machine in an authenticated and secure way
  • Uses an advanced grouping mechanism to restrict network access to services and files only to specific users
  • Allows central management of security mechanisms like passwords, SSH Public Keys, SUDO rules, Keytabs, Access Control Rules
  • Enables delegation of selected administrative tasks to other power users
  • Integrates into Active Directory environments

Components

The FreeIPA project provides unified installation and management tools for the following components:

Project Website

Releases, announcements and other information can be found on the IPA server project page at http://www.freeipa.org/ .

Documentation

The most up-to-date documentation can be found at http://freeipa.org/page/Documentation .

Quick Start

To get started quickly, start here: http://www.freeipa.org/page/Quick_Start_Guide

For developers

Licensing

Please see the file called COPYING.

Contacts