IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2024-12-26 17:01:14 -06:00
Code Issues Packages Projects Releases Wiki Activity
247a3a43b7
freeipa/install/share/Makefile.am

70 lines
1.4 KiB
Makefile
Raw Normal View History

Autotool ipa-server - patch from William Jon McCann <mccann@jhu.edu>.
0000-12-31 18:09:24 -05:50
NULL =
appdir = $(IPA_DATA_DIR)
merge initial radius work
2007-11-03 11:22:20 -05:00
app_DATA = \
Incorporate new schema for IPAv2 Loading this via LDIF is a temporary measure until we can load it online. This requires removing the dNSRecord declarations from 05rfc2247.ldif so a replacement copy is included for now. Also add the netgroups container.
2009-02-10 14:52:25 -06:00
05rfc2247.ldif \
merge initial radius work
2007-11-03 11:22:20 -05:00
60kerberos.ldif \
60samba.ldif \
Fix installation Add missing schema for GUI Config, and missing objectclass for cn=accounts container
2007-11-18 14:02:26 -06:00
60ipaconfig.ldif \
Incorporate new schema for IPAv2 Loading this via LDIF is a temporary measure until we can load it online. This requires removing the dNSRecord declarations from 05rfc2247.ldif so a replacement copy is included for now. Also add the netgroups container.
2009-02-10 14:52:25 -06:00
60basev2.ldif \
v3-schema: Add new ipaExternalGroup objectclass This construct allows to have a group of ipaExternalMember attributes, that can be nested in a normal ipa Group ('memberOf' is allowed). It cannot contain normal ipa users/groups and cannot be nested with another group of the same type ('member' is not allowed).
2011-08-15 14:02:19 -05:00
60basev3.ldif \
schema: Split ipadns definitions from basev2 ones
2011-08-15 13:18:50 -05:00
60ipadns.ldif \
Perform case-insensitive searches for principals on TGS requests We want to always resolve TGS requests even if the user mistakenly sends a request for a service ticket where the fqdn part contain upper case letters. The actual implementation follows hints set by KDC. When AP_REQ is done, KDC sets KRB5_FLAG_ALIAS_OK and we obey it when looking for principals on TGS requests. https://fedorahosted.org/freeipa/ticket/1577
2012-03-26 06:23:42 -05:00
61kerberos-ipav3.ldif \
Add support for sudoOrder Update ipaSudoRule objectClass on upgrades to add new attributes. Ensure uniqueness of sudoOrder in rules. The attributes sudoNotBefore and sudoNotAfter are being added to schema but not as Params. https://fedorahosted.org/freeipa/ticket/1314
2012-03-01 13:02:28 -06:00
65ipasudo.ldif \
Let anonymous users browse the VLV index This is needed for automount support on Solaris http://docs.sun.com/app/docs/doc/819-5201/6n7a588i7?l=en&a=view
2009-06-10 09:01:08 -05:00
anonymous-vlv.ldif \
merge initial radius work
2007-11-03 11:22:20 -05:00
bootstrap-template.ldif \
Add signing profile to CA installation so we can sign the firefox jar file. Use the requestId we get back from the CA when requesting the RA agent cert and use that to issue the certificate rather than hardcoding 7. This also adds some clean-up of file permissions and leaking fds
2009-04-17 16:17:31 -05:00
caJarSigningCert.cfg.template \
merge initial radius work
2007-11-03 11:22:20 -05:00
default-aci.ldif \
Create default HBAC rule allowing any user to access any host from any host This is to make initial installation and testing easier. Use the --no_hbac_allow option on the command-line to disable this when doing an install. To remove it from a running server do: ipa hbac-del allow_all
2010-05-04 14:24:54 -05:00
default-hbac.ldif \
Make --setup-dns work on replica installation The ipa-replica-install script will setup the DNS if user specifies the --setup-dns option. It will only add the zone into LDAP if the cn=dns,$SUFFIX container doesn't exist. For now, however, we do not add the records.
2009-06-26 12:37:49 -05:00
delegation.ldif \
Add replication related acis to all replicas Fixes: https://fedorahosted.org/freeipa/ticket/617
2010-12-11 10:02:08 -06:00
replica-acis.ldif \
Autotune directory server to use a greater number of files This changes the system limits for the dirsrv user as well as configuring DS to allow by default 8192 max files and 64 reserved files (for replication indexes, etc..). Fixes: https://fedorahosted.org/freeipa/ticket/464
2010-11-16 11:45:21 -06:00
ds-nfiles.ldif \
Use LDAP instead of flat file for zone storage
2009-05-12 08:20:24 -05:00
dns.ldif \
merge initial radius work
2007-11-03 11:22:20 -05:00
kerberos.ldif \
Fix misspelling of the word indices.
2008-01-25 12:29:49 -06:00
indices.ldif \
merge initial radius work
2007-11-03 11:22:20 -05:00
bind.named.conf.template \
bind.zone.db.template \
certmap.conf.template \
kdc.conf.template \
Add support for configuring KDC certs for PKINIT This patch adds support only for the selfsign case. Replica support is also still missing at this stage.
2010-10-29 15:23:21 -05:00
kdc_extensions.template \
kdc_req.conf.template \
merge initial radius work
2007-11-03 11:22:20 -05:00
krb5.conf.template \
krb5.ini.template \
krb.con.template \
Build and installation of Kerberos authentication extension This patch is adding a build of kerberosauth.xpi (FF Kerberos authentication extension). Currently the build is done in install phase of FreeIPA server. It is to allow signing of the extension by singing certificate. The signing might not be necessary because the only outcome is that in extension installation FF doesn't show that the maker is not verified. It shows text: 'Object signing cert'. This might be a bug in httpinstance.py:262(db.create_signing_cert("Signing-Cert", "Object Signing Cert", ca_db)) The value is in place of hostname parameter. If the extension is not signed, it can be created in rpm build phase, which should make upgrades easier. Current implementation doesn't handle upgrades yet. In order to keep extension and config pages not dependent on a realm, a krb.js.teplate file was created. This template is used for creating a /usr/share/ipa/html/krb.js file in install phase which holds FreeIPA's realm and domain information. This information can be then used by config pages by importing this file. Ticket: https://fedorahosted.org/freeipa/ticket/3094
2012-10-04 10:08:17 -05:00
krb.js.template \
merge initial radius work
2007-11-03 11:22:20 -05:00
krbrealm.con.template \
Build and installation of Kerberos authentication extension This patch is adding a build of kerberosauth.xpi (FF Kerberos authentication extension). Currently the build is done in install phase of FreeIPA server. It is to allow signing of the extension by singing certificate. The signing might not be necessary because the only outcome is that in extension installation FF doesn't show that the maker is not verified. It shows text: 'Object signing cert'. This might be a bug in httpinstance.py:262(db.create_signing_cert("Signing-Cert", "Object Signing Cert", ca_db)) The value is in place of hostname parameter. If the extension is not signed, it can be created in rpm build phase, which should make upgrades easier. Current implementation doesn't handle upgrades yet. In order to keep extension and config pages not dependent on a realm, a krb.js.teplate file was created. This template is used for creating a /usr/share/ipa/html/krb.js file in install phase which holds FreeIPA's realm and domain information. This information can be then used by config pages by importing this file. Ticket: https://fedorahosted.org/freeipa/ticket/3094
2012-10-04 10:08:17 -05:00
preferences.html.template \
Add ipa-adtrust-install utility https://fedorahosted.org/freeipa/ticket/1619
2011-09-07 03:17:12 -05:00
smb.conf.template \
Add trust management for Active Directory trusts
2012-02-28 05:24:41 -06:00
smb.conf.empty \
Introduce service base class and clean up ipa-server-install 1) Add a base class for all of the instance objects. 2) Normalize usage of logging. 3) General cleanups of ipa-server-install. 4) Make better use of httpinstance. 5) Add webguiinstance. 6) Improve progress reporting during installation. Works Here (TM), but it would be nice to get someone else to test since this moves code around a bit.
0000-12-31 18:09:24 -05:50
referint-conf.ldif \
id ranges: change DNA configuration Change the way we specify the id ranges to force uid and gid ranges to always be the same. Add option to specify a maximum id. Change DNA configuration to use shared ranges so that masters and replicas can actually share the same overall range in a safe way. Configure replicas so that their default range is depleted. This will force them to fetch a range portion from the master on the first install. fixes: https://fedorahosted.org/freeipa/ticket/198
2010-11-11 17:15:28 -06:00
dna.ldif \
Add posix auto gen for single master case
2007-11-06 17:57:15 -06:00
master-entry.ldif \
Initialize memberof patch from Pete Rowley.
0000-12-31 18:09:24 -05:50
memberof-task.ldif \
No longer use the IPA-specific memberof plugin. Use the DS-supplied one.
2009-10-09 16:07:03 -05:00
memberof-conf.ldif \
New tool to enable/disable DS plugin to act as NIS server
2009-05-07 09:51:44 -05:00
nis.uldif \
Make sure KrbPrincipalName is unique server-wide
2008-02-21 21:31:16 -06:00
unique-attributes.ldif \
New tool to enable/disable DS plugin to act as NIS server
2009-05-07 09:51:44 -05:00
schema_compat.uldif \
Install the ldapi ldif file
2009-08-28 07:46:54 -05:00
ldapi.ldif \
Run ipaserver under mod_wsgi
2010-02-24 12:29:23 -06:00
wsgi.py \
Move Managed Entries into their own container in the replicated space. Repoint cn=Managed Entries,cn=plugins,cn=config in common_setup Create: cn=Managed Entries,cn=etc,$SUFFIX Create: cn=Definitions,cn=Managed Entries,cn=etc,$SUFFIX Create: cn=Templates,cn=Managed Entries,cn=etc,$SUFFIX Create method for dynamically migrating any and all custom Managed Entries from the cn=config space into the new container. Separate the connection creation during update so that a restart can be performed to initialize changes before performing a delete. Add wait_for_open_socket() method in installutils https://fedorahosted.org/freeipa/ticket/1708
2011-09-08 14:07:26 -05:00
repoint-managed-entries.ldif \
managed-entries.ldif \
Add support for User-Private Groups This uses a new 389-ds plugin, Managed Entries, to automatically create a group entry when a user is created. The DNA plugin ensures that the group has a gidNumber that matches the users uidNumber. When the user is removed the group is automatically removed as well. If the managed entries plugin is not available or if a specific, separate range for gidNumber is passed in at install time then User-Private Groups will not be configured. The code checking for the Managed Entries plugin may be removed at some point. This is there because this plugin is only available in a 389-ds alpha release currently (1.2.6-a4).
2010-06-25 15:14:46 -05:00
user_private_groups.ldif \
managed entry hostgroup netgroup support https://fedorahosted.org/freeipa/ticket/543
2010-12-10 17:21:39 -06:00
host_nis_groups.ldif \
ipa-uuid: enable plugin in IPA
2010-10-15 16:52:37 -05:00
uuid-ipauniqueid.ldif \
ipa-modrdn: Enable plugin to handle krbPrincipalName on renames
2010-10-22 15:03:18 -05:00
modrdn-krbprinc.ldif \
Enable EntryUSN plugin by default, with global scope This will allow clients to use entryusn values to track what changed in the directory regardles of replication delays. Fixes: https://fedorahosted.org/freeipa/ticket/526
2010-11-23 09:35:49 -06:00
entryusn.ldif \
Allow SASL/EXTERNAL authentication for the root user This gives the root user low privileges so that when anonymous searches are denied the init scripts can still search the directory via ldapi to get the list of serevices to start. Fixes: https://fedorahosted.org/freeipa/ticket/795
2011-01-19 14:17:25 -06:00
root-autobind.ldif \
Create default disabled sudo bind user Read access is denied to the sudo container for unauthenticated users. This shared user can be used to provide authenticated access to the sudo information. https://fedorahosted.org/freeipa/ticket/998
2011-02-23 13:37:07 -06:00
sudobind.ldif \
34 Create FreeIPA CLI Plugin for the 389 Auto Membership plugin Added new container in etc to hold the automembership configs. Modified constants to point to the new container Modified dsinstance to create the container Created automember.py to add the new commands Added xmlrpc test to verify functionality Added minor fix to user.py for constant behavior between memberof and automember https://fedorahosted.org/freeipa/ticket/1272
2011-08-30 19:48:15 -05:00
automember.ldif \
replica-automember.ldif \
Update S4U2proxy delegation list when creating replicas
2012-02-02 13:15:02 -06:00
replica-s4u2proxy.ldif \
Autotool ipa-server - patch from William Jon McCann <mccann@jhu.edu>.
0000-12-31 18:09:24 -05:50
$(NULL)
merge initial radius work
2007-11-03 11:22:20 -05:00
EXTRA_DIST = \
$(app_DATA) \
Autotool ipa-server - patch from William Jon McCann <mccann@jhu.edu>.
0000-12-31 18:09:24 -05:50
$(NULL)
merge initial radius work
2007-11-03 11:22:20 -05:00
MAINTAINERCLEANFILES = \
*~ \
Autotool ipa-server - patch from William Jon McCann <mccann@jhu.edu>.
0000-12-31 18:09:24 -05:50
Makefile.in
Reference in New Issue Copy Permalink