IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2024-12-30 10:47:08 -06:00
Code Issues Packages Projects Releases Wiki Activity
947c7398ed
freeipa/install/share/Makefile.am

83 lines
1.6 KiB
Makefile
Raw Normal View History

Autotool ipa-server - patch from William Jon McCann <mccann@jhu.edu>.
0000-12-31 18:09:24 -05:50
NULL =
Add ipa-advise plugins for legacy clients Old versions of SSSD do not directly support cross-realm trusts between IPA and AD. This patch introduces plugins for the ipa-advise tool, which should help with configuring an old version of SSSD (1.5-1.8) to gain access to resources in trusted domain. Since the configuration steps differ depending on whether the platform includes the authconfig tool, two plugins are needed: * config-redhat-sssd-before-1-9 - provides configuration for Red Hat based systems, as these system include the autconfig utility * config-generic-sssd-before-1-9 - provides configuration for other platforms https://fedorahosted.org/freeipa/ticket/3671 https://fedorahosted.org/freeipa/ticket/3672
2013-08-01 07:12:39 -05:00
SUBDIRS = \
advise \
$(NULL)
Autotool ipa-server - patch from William Jon McCann <mccann@jhu.edu>.
0000-12-31 18:09:24 -05:50
appdir = $(IPA_DATA_DIR)
merge initial radius work
2007-11-03 11:22:20 -05:00
app_DATA = \
Incorporate new schema for IPAv2 Loading this via LDIF is a temporary measure until we can load it online. This requires removing the dNSRecord declarations from 05rfc2247.ldif so a replacement copy is included for now. Also add the netgroups container.
2009-02-10 14:52:25 -06:00
05rfc2247.ldif \
Add formerly update-only schema Some schema was only delivered in updates. Add it back as ldif files. https://fedorahosted.org/freeipa/ticket/3454
2013-04-29 11:09:45 -05:00
15rfc2307bis.ldif \
15rfc4876.ldif \
merge initial radius work
2007-11-03 11:22:20 -05:00
60kerberos.ldif \
60samba.ldif \
Fix installation Add missing schema for GUI Config, and missing objectclass for cn=accounts container
2007-11-18 14:02:26 -06:00
60ipaconfig.ldif \
Incorporate new schema for IPAv2 Loading this via LDIF is a temporary measure until we can load it online. This requires removing the dNSRecord declarations from 05rfc2247.ldif so a replacement copy is included for now. Also add the netgroups container.
2009-02-10 14:52:25 -06:00
60basev2.ldif \
v3-schema: Add new ipaExternalGroup objectclass This construct allows to have a group of ipaExternalMember attributes, that can be nested in a normal ipa Group ('memberOf' is allowed). It cannot contain normal ipa users/groups and cannot be nested with another group of the same type ('member' is not allowed).
2011-08-15 14:02:19 -05:00
60basev3.ldif \
schema: Split ipadns definitions from basev2 ones
2011-08-15 13:18:50 -05:00
60ipadns.ldif \
Perform case-insensitive searches for principals on TGS requests We want to always resolve TGS requests even if the user mistakenly sends a request for a service ticket where the fqdn part contain upper case letters. The actual implementation follows hints set by KDC. When AP_REQ is done, KDC sets KRB5_FLAG_ALIAS_OK and we obey it when looking for principals on TGS requests. https://fedorahosted.org/freeipa/ticket/1577
2012-03-26 06:23:42 -05:00
61kerberos-ipav3.ldif \
Add LDAP schema for certificate store. Part of https://fedorahosted.org/freeipa/ticket/3259 Part of https://fedorahosted.org/freeipa/ticket/3520 Reviewed-By: Rob Crittenden <rcritten@redhat.com>
2014-06-10 07:04:36 -05:00
65ipacertstore.ldif \
Add support for sudoOrder Update ipaSudoRule objectClass on upgrades to add new attributes. Ensure uniqueness of sudoOrder in rules. The attributes sudoNotBefore and sudoNotAfter are being added to schema but not as Params. https://fedorahosted.org/freeipa/ticket/1314
2012-03-01 13:02:28 -06:00
65ipasudo.ldif \
Add IPA OTP schema and ACLs This commit adds schema support for two factor authentication via OTP devices, including RADIUS or TOTP. This schema will be used by future patches which will enable two factor authentication directly. https://fedorahosted.org/freeipa/ticket/3365 http://freeipa.org/page/V3/OTP
2013-04-11 12:24:46 -05:00
70ipaotp.ldif \
Let anonymous users browse the VLV index This is needed for automount support on Solaris http://docs.sun.com/app/docs/doc/819-5201/6n7a588i7?l=en&a=view
2009-06-10 09:01:08 -05:00
anonymous-vlv.ldif \
merge initial radius work
2007-11-03 11:22:20 -05:00
bootstrap-template.ldif \
Add signing profile to CA installation so we can sign the firefox jar file. Use the requestId we get back from the CA when requesting the RA agent cert and use that to issue the certificate rather than hardcoding 7. This also adds some clean-up of file permissions and leaking fds
2009-04-17 16:17:31 -05:00
caJarSigningCert.cfg.template \
merge initial radius work
2007-11-03 11:22:20 -05:00
default-aci.ldif \
Create default HBAC rule allowing any user to access any host from any host This is to make initial installation and testing easier. Use the --no_hbac_allow option on the command-line to disable this when doing an install. To remove it from a running server do: ipa hbac-del allow_all
2010-05-04 14:24:54 -05:00
default-hbac.ldif \
ipa-adtrust-install: create fallback group with ldif file Currently the framework is used to add the group but we want to avoid that users are added explicitly to the group by removing the objectclasses groupofnames, ipausergroup and nestedgroup and we want to use a name with spaces in it. Both it not easy possible with the framework, a LDIF file is used instead to create the group. Fixes https://fedorahosted.org/freeipa/ticket/3147
2012-10-08 03:44:07 -05:00
default-smb-group.ldif \
Make --setup-dns work on replica installation The ipa-replica-install script will setup the DNS if user specifies the --setup-dns option. It will only add the zone into LDAP if the cn=dns,$SUFFIX container doesn't exist. For now, however, we do not add the records.
2009-06-26 12:37:49 -05:00
delegation.ldif \
Explicitly disable betxn plugins for the time being. This should work with 389-ds-base 1.2.x and 1.3.0. Without other plugin changes 389-ds-base can deadlock. https://fedorahosted.org/freeipa/ticket/3046
2012-10-10 21:41:02 -05:00
disable-betxn.ldif \
Add replication related acis to all replicas Fixes: https://fedorahosted.org/freeipa/ticket/617
2010-12-11 10:02:08 -06:00
replica-acis.ldif \
Autotune directory server to use a greater number of files This changes the system limits for the dirsrv user as well as configuring DS to allow by default 8192 max files and 64 reserved files (for replication indexes, etc..). Fixes: https://fedorahosted.org/freeipa/ticket/464
2010-11-16 11:45:21 -06:00
ds-nfiles.ldif \
Use LDAP instead of flat file for zone storage
2009-05-12 08:20:24 -05:00
dns.ldif \
merge initial radius work
2007-11-03 11:22:20 -05:00
kerberos.ldif \
Fix misspelling of the word indices.
2008-01-25 12:29:49 -06:00
indices.ldif \
merge initial radius work
2007-11-03 11:22:20 -05:00
bind.named.conf.template \
bind.zone.db.template \
certmap.conf.template \
kdc.conf.template \
Add support for configuring KDC certs for PKINIT This patch adds support only for the selfsign case. Replica support is also still missing at this stage.
2010-10-29 15:23:21 -05:00
kdc_extensions.template \
kdc_req.conf.template \
merge initial radius work
2007-11-03 11:22:20 -05:00
krb5.conf.template \
krb5.ini.template \
krb.con.template \
Build and installation of Kerberos authentication extension This patch is adding a build of kerberosauth.xpi (FF Kerberos authentication extension). Currently the build is done in install phase of FreeIPA server. It is to allow signing of the extension by singing certificate. The signing might not be necessary because the only outcome is that in extension installation FF doesn't show that the maker is not verified. It shows text: 'Object signing cert'. This might be a bug in httpinstance.py:262(db.create_signing_cert("Signing-Cert", "Object Signing Cert", ca_db)) The value is in place of hostname parameter. If the extension is not signed, it can be created in rpm build phase, which should make upgrades easier. Current implementation doesn't handle upgrades yet. In order to keep extension and config pages not dependent on a realm, a krb.js.teplate file was created. This template is used for creating a /usr/share/ipa/html/krb.js file in install phase which holds FreeIPA's realm and domain information. This information can be then used by config pages by importing this file. Ticket: https://fedorahosted.org/freeipa/ticket/3094
2012-10-04 10:08:17 -05:00
krb.js.template \
merge initial radius work
2007-11-03 11:22:20 -05:00
krbrealm.con.template \
Build and installation of Kerberos authentication extension This patch is adding a build of kerberosauth.xpi (FF Kerberos authentication extension). Currently the build is done in install phase of FreeIPA server. It is to allow signing of the extension by singing certificate. The signing might not be necessary because the only outcome is that in extension installation FF doesn't show that the maker is not verified. It shows text: 'Object signing cert'. This might be a bug in httpinstance.py:262(db.create_signing_cert("Signing-Cert", "Object Signing Cert", ca_db)) The value is in place of hostname parameter. If the extension is not signed, it can be created in rpm build phase, which should make upgrades easier. Current implementation doesn't handle upgrades yet. In order to keep extension and config pages not dependent on a realm, a krb.js.teplate file was created. This template is used for creating a /usr/share/ipa/html/krb.js file in install phase which holds FreeIPA's realm and domain information. This information can be then used by config pages by importing this file. Ticket: https://fedorahosted.org/freeipa/ticket/3094
2012-10-04 10:08:17 -05:00
preferences.html.template \
Add ipa-adtrust-install utility https://fedorahosted.org/freeipa/ticket/1619
2011-09-07 03:17:12 -05:00
smb.conf.template \
Add trust management for Active Directory trusts
2012-02-28 05:24:41 -06:00
smb.conf.empty \
Introduce service base class and clean up ipa-server-install 1) Add a base class for all of the instance objects. 2) Normalize usage of logging. 3) General cleanups of ipa-server-install. 4) Make better use of httpinstance. 5) Add webguiinstance. 6) Improve progress reporting during installation. Works Here (TM), but it would be nice to get someone else to test since this moves code around a bit.
0000-12-31 18:09:24 -05:50
referint-conf.ldif \
id ranges: change DNA configuration Change the way we specify the id ranges to force uid and gid ranges to always be the same. Add option to specify a maximum id. Change DNA configuration to use shared ranges so that masters and replicas can actually share the same overall range in a safe way. Configure replicas so that their default range is depleted. This will force them to fetch a range portion from the master on the first install. fixes: https://fedorahosted.org/freeipa/ticket/198
2010-11-11 17:15:28 -06:00
dna.ldif \
Add posix auto gen for single master case
2007-11-06 17:57:15 -06:00
master-entry.ldif \
Initialize memberof patch from Pete Rowley.
0000-12-31 18:09:24 -05:50
memberof-task.ldif \
No longer use the IPA-specific memberof plugin. Use the DS-supplied one.
2009-10-09 16:07:03 -05:00
memberof-conf.ldif \
New tool to enable/disable DS plugin to act as NIS server
2009-05-07 09:51:44 -05:00
nis.uldif \
Make sure KrbPrincipalName is unique server-wide
2008-02-21 21:31:16 -06:00
unique-attributes.ldif \
New tool to enable/disable DS plugin to act as NIS server
2009-05-07 09:51:44 -05:00
schema_compat.uldif \
Install the ldapi ldif file
2009-08-28 07:46:54 -05:00
ldapi.ldif \
Run ipaserver under mod_wsgi
2010-02-24 12:29:23 -06:00
wsgi.py \
Move Managed Entries into their own container in the replicated space. Repoint cn=Managed Entries,cn=plugins,cn=config in common_setup Create: cn=Managed Entries,cn=etc,$SUFFIX Create: cn=Definitions,cn=Managed Entries,cn=etc,$SUFFIX Create: cn=Templates,cn=Managed Entries,cn=etc,$SUFFIX Create method for dynamically migrating any and all custom Managed Entries from the cn=config space into the new container. Separate the connection creation during update so that a restart can be performed to initialize changes before performing a delete. Add wait_for_open_socket() method in installutils https://fedorahosted.org/freeipa/ticket/1708
2011-09-08 14:07:26 -05:00
repoint-managed-entries.ldif \
managed-entries.ldif \
Add support for User-Private Groups This uses a new 389-ds plugin, Managed Entries, to automatically create a group entry when a user is created. The DNA plugin ensures that the group has a gidNumber that matches the users uidNumber. When the user is removed the group is automatically removed as well. If the managed entries plugin is not available or if a specific, separate range for gidNumber is passed in at install time then User-Private Groups will not be configured. The code checking for the Managed Entries plugin may be removed at some point. This is there because this plugin is only available in a 389-ds alpha release currently (1.2.6-a4).
2010-06-25 15:14:46 -05:00
user_private_groups.ldif \
managed entry hostgroup netgroup support https://fedorahosted.org/freeipa/ticket/543
2010-12-10 17:21:39 -06:00
host_nis_groups.ldif \
ipa-uuid: enable plugin in IPA
2010-10-15 16:52:37 -05:00
uuid-ipauniqueid.ldif \
ipa-modrdn: Enable plugin to handle krbPrincipalName on renames
2010-10-22 15:03:18 -05:00
modrdn-krbprinc.ldif \
Enable EntryUSN plugin by default, with global scope This will allow clients to use entryusn values to track what changed in the directory regardles of replication delays. Fixes: https://fedorahosted.org/freeipa/ticket/526
2010-11-23 09:35:49 -06:00
entryusn.ldif \
Allow SASL/EXTERNAL authentication for the root user This gives the root user low privileges so that when anonymous searches are denied the init scripts can still search the directory via ldapi to get the list of serevices to start. Fixes: https://fedorahosted.org/freeipa/ticket/795
2011-01-19 14:17:25 -06:00
root-autobind.ldif \
Create default disabled sudo bind user Read access is denied to the sudo container for unauthenticated users. This shared user can be used to provide authenticated access to the sudo information. https://fedorahosted.org/freeipa/ticket/998
2011-02-23 13:37:07 -06:00
sudobind.ldif \
34 Create FreeIPA CLI Plugin for the 389 Auto Membership plugin Added new container in etc to hold the automembership configs. Modified constants to point to the new container Modified dsinstance to create the container Created automember.py to add the new commands Added xmlrpc test to verify functionality Added minor fix to user.py for constant behavior between memberof and automember https://fedorahosted.org/freeipa/ticket/1272
2011-08-30 19:48:15 -05:00
automember.ldif \
replica-automember.ldif \
Update S4U2proxy delegation list when creating replicas
2012-02-02 13:15:02 -06:00
replica-s4u2proxy.ldif \
Upload CA cert in the directory on install This will later allow clients to securely download the CA cert by performaing mutual auth using LDAP with GSSAPI
2012-11-12 16:43:05 -06:00
copy-schema-to-ca.py \
Enable SASL mapping fallback. Assign a default priority of 10 to our SASL mappings. https://fedorahosted.org/freeipa/ticket/3330
2013-03-22 05:15:51 -05:00
sasl-mapping-fallback.ldif \
Fix nsslapdPlugin object class after initial replication. This is a workaround for <https://fedorahosted.org/389/ticket/47490>. https://fedorahosted.org/freeipa/ticket/3915
2013-09-09 03:15:11 -05:00
schema-update.ldif \
Autotool ipa-server - patch from William Jon McCann <mccann@jhu.edu>.
0000-12-31 18:09:24 -05:50
$(NULL)
merge initial radius work
2007-11-03 11:22:20 -05:00
EXTRA_DIST = \
$(app_DATA) \
Autotool ipa-server - patch from William Jon McCann <mccann@jhu.edu>.
0000-12-31 18:09:24 -05:50
$(NULL)
merge initial radius work
2007-11-03 11:22:20 -05:00
MAINTAINERCLEANFILES = \
*~ \
Autotool ipa-server - patch from William Jon McCann <mccann@jhu.edu>.
0000-12-31 18:09:24 -05:50
Makefile.in
Reference in New Issue Copy Permalink