freeipa/daemons/ipa-slapi-plugins/ipa-winsync/ipa-winsync-conf.ldif

dn: cn=ipa-winsync,cn=plugins,cn=config
changetype: add
objectclass: top
objectclass: nsSlapdPlugin
objectclass: extensibleObject
cn: ipa-winsync
nsslapd-pluginpath: libipa_winsync
nsslapd-plugininitfunc: ipa_winsync_plugin_init
nsslapd-pluginDescription: Allows IPA to work with the DS windows sync feature
nsslapd-pluginid: ipa-winsync
nsslapd-pluginversion: 1.0
nsslapd-pluginvendor: Red Hat
nsslapd-plugintype: preoperation
nsslapd-pluginenabled: on
nsslapd-plugin-depends-on-type: database
ipaWinSyncRealmFilter: (objectclass=krbRealmContainer)
ipaWinSyncRealmAttr: cn
ipaWinSyncNewEntryFilter: (cn=ipaConfig)
ipaWinSyncNewUserOCAttr: ipauserobjectclasses
ipaWinSyncUserFlatten: true
ipaWinsyncHomeDirAttr: ipaHomesRootDir
ipaWinsyncLoginShellAttr: ipaDefaultLoginShell
ipaWinSyncDefaultGroupAttr: ipaDefaultPrimaryGroup
ipaWinSyncDefaultGroupFilter: (gidNumber=*)(objectclass=posixGroup)(objectclass=groupOfNames)
ipaWinSyncAcctDisable: both
ipaWinSyncForceSync: true
ipaWinSyncUserAttr: uidNumber -1
ipaWinSyncUserAttr: gidNumber -1
Initial addition of ipa-winsync plugin 2008-08-13 15:43:58 -05:00			`dn: cn=ipa-winsync,cn=plugins,cn=config`
Added support to IPA server install to install the winsync plugin configuration entry Added support to ipa-replica-manage to add winsync agreements. I mostly used the existing code for setting up replication agreements since replication and winsync are quite similar in their configuration. I just had to add some extra attributes to the sync agreement configuration. The tricky part was importing the Windows CA cert. 2008-09-11 11:56:55 -05:00			`changetype: add`
Initial addition of ipa-winsync plugin 2008-08-13 15:43:58 -05:00			`objectclass: top`
			`objectclass: nsSlapdPlugin`
			`objectclass: extensibleObject`
			`cn: ipa-winsync`
Added support to IPA server install to install the winsync plugin configuration entry Added support to ipa-replica-manage to add winsync agreements. I mostly used the existing code for setting up replication agreements since replication and winsync are quite similar in their configuration. I just had to add some extra attributes to the sync agreement configuration. The tricky part was importing the Windows CA cert. 2008-09-11 11:56:55 -05:00			`nsslapd-pluginpath: libipa_winsync`
Initial addition of ipa-winsync plugin 2008-08-13 15:43:58 -05:00			`nsslapd-plugininitfunc: ipa_winsync_plugin_init`
Added support to IPA server install to install the winsync plugin configuration entry Added support to ipa-replica-manage to add winsync agreements. I mostly used the existing code for setting up replication agreements since replication and winsync are quite similar in their configuration. I just had to add some extra attributes to the sync agreement configuration. The tricky part was importing the Windows CA cert. 2008-09-11 11:56:55 -05:00			`nsslapd-pluginDescription: Allows IPA to work with the DS windows sync feature`
			`nsslapd-pluginid: ipa-winsync`
			`nsslapd-pluginversion: 1.0`
			`nsslapd-pluginvendor: Red Hat`
Initial addition of ipa-winsync plugin 2008-08-13 15:43:58 -05:00			`nsslapd-plugintype: preoperation`
			`nsslapd-pluginenabled: on`
			`nsslapd-plugin-depends-on-type: database`
Added support for posixAccount -lookup attribute containing the homeDirectory prefix and use that to construct the homeDirectory attribute -lookup attribute containing the default gidNumber and use that to add the gidNumber to new users -construct the gecos field from the cn attribute 2008-08-19 19:00:49 -05:00			`ipaWinSyncRealmFilter: (objectclass=krbRealmContainer)`
			`ipaWinSyncRealmAttr: cn`
			`ipaWinSyncNewEntryFilter: (cn=ipaConfig)`
			`ipaWinSyncNewUserOCAttr: ipauserobjectclasses`
			`ipaWinSyncUserFlatten: true`
Added ipa-winsync-config.c - this handles dynamic configuration via the DSE callbacks, and gets default values from various configuration entries in the IPA tree 2008-08-19 19:43:19 -05:00			`ipaWinsyncHomeDirAttr: ipaHomesRootDir`
Set the loginShell attribute on winsynced entries if configured Fixes: https://fedorahosted.org/freeipa/ticket/266 2011-02-18 09:54:31 -06:00			`ipaWinsyncLoginShellAttr: ipaDefaultLoginShell`
Added ipa-winsync-config.c - this handles dynamic configuration via the DSE callbacks, and gets default values from various configuration entries in the IPA tree 2008-08-19 19:43:19 -05:00			`ipaWinSyncDefaultGroupAttr: ipaDefaultPrimaryGroup`
Do not depend on MMR plugin - start before MMR plugin The ipa-winsync plugin needs to start before the MMR plugin, so that it can register the API functions. Also, the slapi-nis schema compat plugin creates an entry that looks exactly like the default IPA group gidNumber entry, so I added an extra (objectclass=groupOfNames) to the filter since the slapi-nis entry doesn't have that. 2008-10-03 15:14:09 -05:00			`ipaWinSyncDefaultGroupFilter: (gidNumber=*)(objectclass=posixGroup)(objectclass=groupOfNames)`
set winsync account disable sync default value to both instead of none 2008-11-11 16:26:18 -06:00			`ipaWinSyncAcctDisable: both`
Adds winsync account disable and force sync 2008-09-26 11:16:04 -05:00			`ipaWinSyncForceSync: true`
Change DNA magic value to -1 to make UID 999 usable Change user-add's uid & gid parameters from autofill to optional. Change the DNA magic value to -1. For old clients, which will still send 999 when they want DNA assignment, translate the 999 to -1. This is done via a new capability, optional_uid_params. Tests included https://fedorahosted.org/freeipa/ticket/2886 2013-01-08 03:10:35 -06:00			`ipaWinSyncUserAttr: uidNumber -1`
			`ipaWinSyncUserAttr: gidNumber -1`