IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2024-12-27 09:21:59 -06:00
Code Issues Packages Projects Releases Wiki Activity
30fdafcfbe
freeipa/install/share/Makefile.am

60 lines
1.2 KiB
Makefile
Raw Normal View History

Autotool ipa-server - patch from William Jon McCann <mccann@jhu.edu>.
0000-12-31 18:09:24 -05:50
NULL =
appdir = $(IPA_DATA_DIR)
merge initial radius work
2007-11-03 11:22:20 -05:00
app_DATA = \
Incorporate new schema for IPAv2 Loading this via LDIF is a temporary measure until we can load it online. This requires removing the dNSRecord declarations from 05rfc2247.ldif so a replacement copy is included for now. Also add the netgroups container.
2009-02-10 14:52:25 -06:00
05rfc2247.ldif \
merge initial radius work
2007-11-03 11:22:20 -05:00
60kerberos.ldif \
60samba.ldif \
Fix installation Add missing schema for GUI Config, and missing objectclass for cn=accounts container
2007-11-18 14:02:26 -06:00
60ipaconfig.ldif \
Incorporate new schema for IPAv2 Loading this via LDIF is a temporary measure until we can load it online. This requires removing the dNSRecord declarations from 05rfc2247.ldif so a replacement copy is included for now. Also add the netgroups container.
2009-02-10 14:52:25 -06:00
60basev2.ldif \
Rename 60sudo.ldif to 60ipasudo.ldif to not overwrite the 389-ds version. This meant that the compat sudo schema was not available. ticket 439
2010-11-04 14:53:31 -05:00
60ipasudo.ldif \
Let anonymous users browse the VLV index This is needed for automount support on Solaris http://docs.sun.com/app/docs/doc/819-5201/6n7a588i7?l=en&a=view
2009-06-10 09:01:08 -05:00
anonymous-vlv.ldif \
merge initial radius work
2007-11-03 11:22:20 -05:00
bootstrap-template.ldif \
Add signing profile to CA installation so we can sign the firefox jar file. Use the requestId we get back from the CA when requesting the RA agent cert and use that to issue the certificate rather than hardcoding 7. This also adds some clean-up of file permissions and leaking fds
2009-04-17 16:17:31 -05:00
caJarSigningCert.cfg.template \
merge initial radius work
2007-11-03 11:22:20 -05:00
default-aci.ldif \
Create default HBAC rule allowing any user to access any host from any host This is to make initial installation and testing easier. Use the --no_hbac_allow option on the command-line to disable this when doing an install. To remove it from a running server do: ipa hbac-del allow_all
2010-05-04 14:24:54 -05:00
default-hbac.ldif \
Big changeset that includes the work around keytab management. Following the changelog history from my dev tree, some comments are useful imo ------------------------------------------------------ user: Simo Sorce <ssorce@redhat.com> date: Fri Dec 21 03:05:36 2007 -0500 files: ipa-server/ipa-slapi-plugins/ipa-pwd-extop/test-get-keytab.c description: Remove remnants of the initial test tool changeset: 563:4fe574b7bdf1 user: Simo Sorce <ssorce@redhat.com> date: Fri Dec 21 02:58:37 2007 -0500 files: ipa-server/ipa-slapi-plugins/ipa-pwd-extop/ipa_pwd_extop.c description: Maybe actually encrypting the keys will help :-) changeset: 562:488ded41242a user: Simo Sorce <ssorce@redhat.com> date: Thu Dec 20 23:53:50 2007 -0500 files: ipa-server/ipa-install/share/Makefile.am ipa-server/ipa-install/share/default-aci.ldif description: Fixes changeset: 561:4518f6f5ecaf user: Simo Sorce <ssorce@redhat.com> date: Thu Dec 20 23:53:32 2007 -0500 files: ipa-admintools/Makefile ipa-admintools/ipa-addservice description: transform the old ipa-getkeytab in a tool to add services as the new ipa-getkeytab won't do it (and IMO it makes more sense to keep the two functions separate anyway). changeset: 559:25a7f8ee973d user: Simo Sorce <ssorce@redhat.com> date: Thu Dec 20 23:48:59 2007 -0500 files: ipa-server/ipa-slapi-plugins/ipa-pwd-extop/ipa_pwd_extop.c description: Bugfixes changeset: 558:28fcabe4aeba user: Simo Sorce <ssorce@redhat.com> date: Thu Dec 20 23:48:29 2007 -0500 files: ipa-client/configure.ac ipa-client/ipa-client.spec ipa-client/ipa-client.spec.in ipa-client/ipa-getkeytab.c description: Configure fixes Add ipa-getkeytab to spec Client fixes changeset: 557:e92a4ffdcda4 user: Simo Sorce <ssorce@redhat.com> date: Thu Dec 20 20:57:10 2007 -0500 files: ipa-client/Makefile.am ipa-client/configure.ac description: Try to make ipa-getkeytab build via autotools changeset: 556:224894175d6b user: Simo Sorce <ssorce@redhat.com> date: Thu Dec 20 20:35:56 2007 -0500 files: ipa-admintools/ipa-getkeytab ipa-client/ipa-getkeytab.c description: Messed a bit with hg commands. To make it short: - Remove the python ipa-getkeytab program - Rename the keytab plugin test program to ipa-getkeytab - Put the program in ipa-client as it should be distributed with the client tools changeset: 555:5e1a068f2e90 user: Simo Sorce <ssorce@redhat.com> date: Thu Dec 20 20:20:40 2007 -0500 files: ipa-server/ipa-slapi-plugins/ipa-pwd-extop/test-get-keytab.c description: Polish the client program changeset: 554:0a5b19a167cf user: Simo Sorce <ssorce@redhat.com> date: Thu Dec 20 18:53:49 2007 -0500 files: ipa-server/ipa-install/share/default-aci.ldif ipa-server/ipa-install/share/default-keytypes.ldif ipa-server/ipa-install/share/kdc.conf.template ipa-server/ipa-install/share/kerberos.ldif ipa-server/ipa-slapi-plugins/ipa-pwd-extop/ipa_pwd_extop.c ipa-server/ipa-slapi-plugins/ipa-pwd-extop/test-get-keytab.c ipa-server/ipaserver/krbinstance.py description: Support retrieving enctypes from LDAP Filter enctypes Update test program changeset: 553:f75d7886cb91 user: Simo Sorce <ssorce@redhat.com> date: Thu Dec 20 00:17:40 2007 -0500 files: ipa-server/ipa-slapi-plugins/ipa-pwd-extop/test-get-keytab.c description: Fix ber generation and remove redundant keys changeset: 552:0769cafe6dcd user: Simo Sorce <ssorce@redhat.com> date: Wed Dec 19 19:31:37 2007 -0500 files: ipa-server/ipa-slapi-plugins/ipa-pwd-extop/test-get-keytab.c description: Avoid stupid segfault changeset: 551:1acd5fdb5788 user: Simo Sorce <ssorce@redhat.com> date: Wed Dec 19 18:39:12 2007 -0500 files: ipa-server/ipa-slapi-plugins/ipa-pwd-extop/ipa_pwd_extop.c description: If ber_peek_tag() returns LBER_ERROR it may just be that we are at the end of the buffer. Unfortunately ber_scanf is broken in the sense that it doesn't actually really consider sequence endings (due probably to the fact they are just representation and do not reflect in the underlieing DER encoding.) changeset: 550:e974fb2726a4 user: Simo Sorce <ssorce@redhat.com> date: Wed Dec 19 18:35:07 2007 -0500 files: ipa-server/ipa-slapi-plugins/ipa-pwd-extop/ipa_pwd_extop.c ipa-server/ipa-slapi-plugins/ipa-pwd-extop/test-get-keytab.c description: First shot at the new method
2007-12-21 10:37:19 -06:00
default-keytypes.ldif \
Use kerberos password policy. This lets the KDC count password failures and can lock out accounts for a period of time. This only works for KDC >= 1.8. There currently is no way to unlock a locked account across a replica. MIT Kerberos 1.9 is adding support for doing so. Once that is available unlock will be added. The concept of a "global" password policy has changed. When we were managing the policy using the IPA password plugin it was smart enough to search up the tree looking for a policy. The KDC is not so smart and relies on the krbpwdpolicyreference to find the policy. For this reason every user entry requires this attribute. I've created a new global_policy entry to store the default password policy. All users point at this now. The group policy works the same and can override this setting. As a result the special "GLOBAL" name has been replaced with global_policy. This policy works like any other and is the default if a name is not provided on the command-line. ticket 51
2010-10-25 16:58:37 -05:00
default-pwpolicy.ldif \
Make --setup-dns work on replica installation The ipa-replica-install script will setup the DNS if user specifies the --setup-dns option. It will only add the zone into LDAP if the cn=dns,$SUFFIX container doesn't exist. For now, however, we do not add the records.
2009-06-26 12:37:49 -05:00
delegation.ldif \
Add replication related acis to all replicas Fixes: https://fedorahosted.org/freeipa/ticket/617
2010-12-11 10:02:08 -06:00
replica-acis.ldif \
Autotune directory server to use a greater number of files This changes the system limits for the dirsrv user as well as configuring DS to allow by default 8192 max files and 64 reserved files (for replication indexes, etc..). Fixes: https://fedorahosted.org/freeipa/ticket/464
2010-11-16 11:45:21 -06:00
ds-nfiles.ldif \
Use LDAP instead of flat file for zone storage
2009-05-12 08:20:24 -05:00
dns.ldif \
merge initial radius work
2007-11-03 11:22:20 -05:00
kerberos.ldif \
Fix misspelling of the word indices.
2008-01-25 12:29:49 -06:00
indices.ldif \
merge initial radius work
2007-11-03 11:22:20 -05:00
bind.named.conf.template \
bind.zone.db.template \
certmap.conf.template \
kdc.conf.template \
Add support for configuring KDC certs for PKINIT This patch adds support only for the selfsign case. Replica support is also still missing at this stage.
2010-10-29 15:23:21 -05:00
kdc_extensions.template \
kdc_req.conf.template \
merge initial radius work
2007-11-03 11:22:20 -05:00
krb5.conf.template \
krb5.ini.template \
krb.con.template \
krbrealm.con.template \
Add automatic browser configuration for kerberos SSO using javascript. This uses the UniversalPreferencesWrite function to set the browser preferences to allow negotiation and ticket forwarding in the IPA domain. A self-signed certificate is generated to sign the javascript.
2007-12-12 08:36:32 -06:00
preferences.html.template \
Introduce service base class and clean up ipa-server-install 1) Add a base class for all of the instance objects. 2) Normalize usage of logging. 3) General cleanups of ipa-server-install. 4) Make better use of httpinstance. 5) Add webguiinstance. 6) Improve progress reporting during installation. Works Here (TM), but it would be nice to get someone else to test since this moves code around a bit.
0000-12-31 18:09:24 -05:50
referint-conf.ldif \
id ranges: change DNA configuration Change the way we specify the id ranges to force uid and gid ranges to always be the same. Add option to specify a maximum id. Change DNA configuration to use shared ranges so that masters and replicas can actually share the same overall range in a safe way. Configure replicas so that their default range is depleted. This will force them to fetch a range portion from the master on the first install. fixes: https://fedorahosted.org/freeipa/ticket/198
2010-11-11 17:15:28 -06:00
dna.ldif \
Add posix auto gen for single master case
2007-11-06 17:57:15 -06:00
master-entry.ldif \
Initialize memberof patch from Pete Rowley.
0000-12-31 18:09:24 -05:50
memberof-task.ldif \
No longer use the IPA-specific memberof plugin. Use the DS-supplied one.
2009-10-09 16:07:03 -05:00
memberof-conf.ldif \
New tool to enable/disable DS plugin to act as NIS server
2009-05-07 09:51:44 -05:00
nis.uldif \
Make sure KrbPrincipalName is unique server-wide
2008-02-21 21:31:16 -06:00
unique-attributes.ldif \
New tool to enable/disable DS plugin to act as NIS server
2009-05-07 09:51:44 -05:00
schema_compat.uldif \
Install the ldapi ldif file
2009-08-28 07:46:54 -05:00
ldapi.ldif \
Run ipaserver under mod_wsgi
2010-02-24 12:29:23 -06:00
wsgi.py \
Add support for User-Private Groups This uses a new 389-ds plugin, Managed Entries, to automatically create a group entry when a user is created. The DNA plugin ensures that the group has a gidNumber that matches the users uidNumber. When the user is removed the group is automatically removed as well. If the managed entries plugin is not available or if a specific, separate range for gidNumber is passed in at install time then User-Private Groups will not be configured. The code checking for the Managed Entries plugin may be removed at some point. This is there because this plugin is only available in a 389-ds alpha release currently (1.2.6-a4).
2010-06-25 15:14:46 -05:00
user_private_groups.ldif \
managed entry hostgroup netgroup support https://fedorahosted.org/freeipa/ticket/543
2010-12-10 17:21:39 -06:00
host_nis_groups.ldif \
ipa-uuid: enable plugin in IPA
2010-10-15 16:52:37 -05:00
uuid-ipauniqueid.ldif \
ipa-modrdn: Enable plugin to handle krbPrincipalName on renames
2010-10-22 15:03:18 -05:00
modrdn-krbprinc.ldif \
Enable EntryUSN plugin by default, with global scope This will allow clients to use entryusn values to track what changed in the directory regardles of replication delays. Fixes: https://fedorahosted.org/freeipa/ticket/526
2010-11-23 09:35:49 -06:00
entryusn.ldif \
Allow SASL/EXTERNAL authentication for the root user This gives the root user low privileges so that when anonymous searches are denied the init scripts can still search the directory via ldapi to get the list of serevices to start. Fixes: https://fedorahosted.org/freeipa/ticket/795
2011-01-19 14:17:25 -06:00
root-autobind.ldif \
Autotool ipa-server - patch from William Jon McCann <mccann@jhu.edu>.
0000-12-31 18:09:24 -05:50
$(NULL)
merge initial radius work
2007-11-03 11:22:20 -05:00
EXTRA_DIST = \
$(app_DATA) \
Autotool ipa-server - patch from William Jon McCann <mccann@jhu.edu>.
0000-12-31 18:09:24 -05:50
$(NULL)
merge initial radius work
2007-11-03 11:22:20 -05:00
MAINTAINERCLEANFILES = \
*~ \
Autotool ipa-server - patch from William Jon McCann <mccann@jhu.edu>.
0000-12-31 18:09:24 -05:50
Makefile.in
Reference in New Issue Copy Permalink