Add support for specifying an LDAP URL.

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
Remove unnecessary strdup() (and resulting leak)

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
Add support for specifying bind DN and password.

This uses a seperate hdb-ldap-secret-file configuration value, which
specifies an external file that may be used to supply the LDAP bind dn
and password. This allows that specific file to be configured with more
restrictive permissions than the global krb5.conf.

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
Document the new hdb-ldap* configuration options.

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
Add a configuration option to enable LDAP Start TLS.

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
Don't SEGV on as-is rules without realm=

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
The k5login_directory parameter and SYSTEM-K5LOGIN[:directory] are supposed to be directories, not path templates with %{luser} substitution

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
More consistent error checks in build_principal()

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
kpasswdd should not enforce principal realm =~ default realm(s)

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
Fix free before use in ipropd_master slaves-stats open function

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
Compare pac timestamp to unix timestamp right when neither are set

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
Temporary fix for high-priority iprop issues

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
use socket_set_nonblocking
only check for keytab content where its needed
type casting to avoid printf warning
plug memory leaks
update leaks check
plug memory leak
Better error messages when UTF8 conversion fails

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
spell-and-gram-proxy-certs

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>