[SSSD] [PATCH] Support password obfuscation in sssd.conf

Jakub Hrozek jhrozek at redhat.com
Mon Aug 30 18:38:02 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

[PATCH 1/7] Move crypto functions into its own subdir
A refactoring patch that creates a common util/crypto subdir with
per-implementation subdirectories for each underlying crypto library
supported by SSSD.

[PATCH 2/7] Add safe copy/move macros for uint16_t
These will be used later on in the code

[PATCH 3/7] Password obfuscation utility functions
This is where the actual obfuscation happens.
Adds two utility functions - one to obfuscate a password and inverse to
extract the cleartext password back. So far, only NSS-based
implementation is provided.

[PATCH 4/7] Fix pysss linking
I noticed that the python bindings were not properly linked so a simple
import pysss failed

[PATCH 5/7] Python bindings for obfuscation
Provides python bindings for utility functions from patch 3/7. These
will be used later on in the obfuscation tool itself.

[PATCH 6/7] sss_obfuscate tool
A tool to add obfuscated passwords into the SSSD config file

[PATCH 7/7] Deobfuscate password in back ends
When obfuscated password is used in config file, the LDAP backend
converts it back to clear text and uses it to authenticate to the
server.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkx7+oUACgkQHsardTLnvCV+2QCg0TXyStJUpcOA3BaDFeZBwCst
CVYAoKpvZPmEviGTNQeIcUYuTOw4mdFr
=TFuL
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Move-crypto-functions-into-its-own-subdir.patch
Type: text/x-patch
Size: 54396 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20100830/d2deb84a/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-Add-safe-copy-move-macros-for-uint16_t.patch
Type: text/x-patch
Size: 1687 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20100830/d2deb84a/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0004-Fix-pysss-linking.patch
Type: text/x-patch
Size: 852 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20100830/d2deb84a/attachment-0002.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0005-Python-bindings-for-obfuscation.patch
Type: text/x-patch
Size: 6480 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20100830/d2deb84a/attachment-0003.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0006-sss_obfuscate-tool.patch
Type: text/x-patch
Size: 8551 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20100830/d2deb84a/attachment-0004.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0003-Password-obfuscation-utility-functions.patch
Type: text/x-patch
Size: 20750 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20100830/d2deb84a/attachment-0005.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0007-Deobfuscate-password-in-back-ends.patch
Type: text/x-patch
Size: 5315 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20100830/d2deb84a/attachment-0006.bin>


More information about the sssd-devel mailing list