freeipa/daemons/ipa-slapi-plugins/ipa-winsync/ipa-winsync-conf.ldif

dn: cn=ipa-winsync,cn=plugins,cn=config
changetype: add
objectclass: top
objectclass: nsSlapdPlugin
objectclass: extensibleObject
cn: ipa-winsync
nsslapd-pluginpath: libipa_winsync
nsslapd-plugininitfunc: ipa_winsync_plugin_init
nsslapd-pluginDescription: Allows IPA to work with the DS windows sync feature
nsslapd-pluginid: ipa-winsync
nsslapd-pluginversion: 1.0
nsslapd-pluginvendor: Red Hat
nsslapd-plugintype: preoperation
nsslapd-pluginenabled: on
nsslapd-plugin-depends-on-type: database
ipaWinSyncRealmFilter: (objectclass=krbRealmContainer)
ipaWinSyncRealmAttr: cn
ipaWinSyncNewEntryFilter: (cn=ipaConfig)
ipaWinSyncNewUserOCAttr: ipauserobjectclasses
ipaWinSyncUserFlatten: true
ipaWinsyncHomeDirAttr: ipaHomesRootDir
ipaWinsyncLoginShellAttr: ipaDefaultLoginShell
ipaWinSyncDefaultGroupAttr: ipaDefaultPrimaryGroup
ipaWinSyncDefaultGroupFilter: (gidNumber=*)(objectclass=posixGroup)(objectclass=groupOfNames)
ipaWinSyncAcctDisable: both
ipaWinSyncForceSync: true
ipaWinSyncUserAttr: uidNumber 999
ipaWinSyncUserAttr: gidNumber 999
Initial addition of ipa-winsync plugin 2008-08-13 15:43:58 -05:00			`dn: cn=ipa-winsync,cn=plugins,cn=config`
Added support to IPA server install to install the winsync plugin configuration entry Added support to ipa-replica-manage to add winsync agreements. I mostly used the existing code for setting up replication agreements since replication and winsync are quite similar in their configuration. I just had to add some extra attributes to the sync agreement configuration. The tricky part was importing the Windows CA cert. 2008-09-11 11:56:55 -05:00			`changetype: add`
Initial addition of ipa-winsync plugin 2008-08-13 15:43:58 -05:00			`objectclass: top`
			`objectclass: nsSlapdPlugin`
			`objectclass: extensibleObject`
			`cn: ipa-winsync`
Added support to IPA server install to install the winsync plugin configuration entry Added support to ipa-replica-manage to add winsync agreements. I mostly used the existing code for setting up replication agreements since replication and winsync are quite similar in their configuration. I just had to add some extra attributes to the sync agreement configuration. The tricky part was importing the Windows CA cert. 2008-09-11 11:56:55 -05:00			`nsslapd-pluginpath: libipa_winsync`
Initial addition of ipa-winsync plugin 2008-08-13 15:43:58 -05:00			`nsslapd-plugininitfunc: ipa_winsync_plugin_init`
Added support to IPA server install to install the winsync plugin configuration entry Added support to ipa-replica-manage to add winsync agreements. I mostly used the existing code for setting up replication agreements since replication and winsync are quite similar in their configuration. I just had to add some extra attributes to the sync agreement configuration. The tricky part was importing the Windows CA cert. 2008-09-11 11:56:55 -05:00			`nsslapd-pluginDescription: Allows IPA to work with the DS windows sync feature`
			`nsslapd-pluginid: ipa-winsync`
			`nsslapd-pluginversion: 1.0`
			`nsslapd-pluginvendor: Red Hat`
Initial addition of ipa-winsync plugin 2008-08-13 15:43:58 -05:00			`nsslapd-plugintype: preoperation`
			`nsslapd-pluginenabled: on`
			`nsslapd-plugin-depends-on-type: database`
Added support for posixAccount -lookup attribute containing the homeDirectory prefix and use that to construct the homeDirectory attribute -lookup attribute containing the default gidNumber and use that to add the gidNumber to new users -construct the gecos field from the cn attribute 2008-08-19 19:00:49 -05:00			`ipaWinSyncRealmFilter: (objectclass=krbRealmContainer)`
			`ipaWinSyncRealmAttr: cn`
			`ipaWinSyncNewEntryFilter: (cn=ipaConfig)`
			`ipaWinSyncNewUserOCAttr: ipauserobjectclasses`
			`ipaWinSyncUserFlatten: true`
Added ipa-winsync-config.c - this handles dynamic configuration via the DSE callbacks, and gets default values from various configuration entries in the IPA tree 2008-08-19 19:43:19 -05:00			`ipaWinsyncHomeDirAttr: ipaHomesRootDir`
Set the loginShell attribute on winsynced entries if configured Fixes: https://fedorahosted.org/freeipa/ticket/266 2011-02-18 09:54:31 -06:00			`ipaWinsyncLoginShellAttr: ipaDefaultLoginShell`
Added ipa-winsync-config.c - this handles dynamic configuration via the DSE callbacks, and gets default values from various configuration entries in the IPA tree 2008-08-19 19:43:19 -05:00			`ipaWinSyncDefaultGroupAttr: ipaDefaultPrimaryGroup`
Do not depend on MMR plugin - start before MMR plugin The ipa-winsync plugin needs to start before the MMR plugin, so that it can register the API functions. Also, the slapi-nis schema compat plugin creates an entry that looks exactly like the default IPA group gidNumber entry, so I added an extra (objectclass=groupOfNames) to the filter since the slapi-nis entry doesn't have that. 2008-10-03 15:14:09 -05:00			`ipaWinSyncDefaultGroupFilter: (gidNumber=*)(objectclass=posixGroup)(objectclass=groupOfNames)`
set winsync account disable sync default value to both instead of none 2008-11-11 16:26:18 -06:00			`ipaWinSyncAcctDisable: both`
Adds winsync account disable and force sync 2008-09-26 11:16:04 -05:00			`ipaWinSyncForceSync: true`
Fix user synchronization. We need to set uidNumber and gidNumber to the magic values so that DNA can assign appropriate Ids, otherwise the synchronization of users from AD will fail with an error about posixAccount requiring a missing (uidNumber) attribute. Fixes: https://fedorahosted.org/freeipa/ticket/1020 2011-02-25 16:00:24 -06:00			`ipaWinSyncUserAttr: uidNumber 999`
			`ipaWinSyncUserAttr: gidNumber 999`