IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2024-12-23 23:50:03 -06:00
Code Issues Packages Projects Releases Wiki Activity
99c0b918a7
freeipa/install/share/unique-attributes.ldif

96 lines
3.2 KiB
Plaintext
Raw Normal View History

Make sure KrbPrincipalName is unique server-wide Fix the build. Somehow this file didn't get committed.
2008-02-21 22:22:31 -06:00
dn: cn=krbPrincipalName uniqueness,cn=plugins,cn=config
changetype: add
objectClass: top
objectClass: nsSlapdPlugin
objectClass: extensibleObject
cn: krbPrincipalName uniqueness
nsslapd-pluginPath: libattr-unique-plugin
nsslapd-pluginInitfunc: NSUniqueAttr_Init
nsslapd-pluginType: preoperation
nsslapd-pluginEnabled: on
Migrate uniquess plugins configuration to new style New configuration style contains options required for user lifecycle management. Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
2015-02-23 09:09:25 -06:00
uniqueness-attribute-name: krbPrincipalName
Make sure KrbPrincipalName is unique server-wide Fix the build. Somehow this file didn't get committed.
2008-02-21 22:22:31 -06:00
nsslapd-plugin-depends-on-type: database
nsslapd-pluginId: NSUniqueAttr
nsslapd-pluginVersion: 1.1.0
nsslapd-pluginVendor: Fedora Project
nsslapd-pluginDescription: Enforce unique attribute values
Fix uniqueness plugins * add uniqueness-subtree-entries-oc:posixAccount to ensure idviews users will not be forced to have unique uid * remove unneded update plugins -> update was moved to .update file * add uniqueness-across-all-subtrees required by user lifecycle management Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
2015-02-23 10:46:46 -06:00
uniqueness-subtrees: cn=accounts,$SUFFIX
uniqueness-subtrees: cn=deleted users,cn=accounts,cn=provisioning,$SUFFIX
uniqueness-across-all-subtrees: on
Make sure KrbPrincipalName is unique server-wide Fix the build. Somehow this file didn't get committed.
2008-02-21 22:22:31 -06:00
- also ensure that krbCanonicalName is unique
2010-02-04 10:07:48 -06:00
dn: cn=krbCanonicalName uniqueness,cn=plugins,cn=config
changetype: add
objectClass: top
objectClass: nsSlapdPlugin
objectClass: extensibleObject
cn: krbCanonicalName uniqueness
nsslapd-pluginPath: libattr-unique-plugin
nsslapd-pluginInitfunc: NSUniqueAttr_Init
nsslapd-pluginType: preoperation
nsslapd-pluginEnabled: on
Migrate uniquess plugins configuration to new style New configuration style contains options required for user lifecycle management. Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
2015-02-23 09:09:25 -06:00
uniqueness-attribute-name: krbCanonicalName
- also ensure that krbCanonicalName is unique
2010-02-04 10:07:48 -06:00
nsslapd-plugin-depends-on-type: database
nsslapd-pluginId: NSUniqueAttr
nsslapd-pluginVersion: 1.1.0
nsslapd-pluginVendor: Fedora Project
nsslapd-pluginDescription: Enforce unique attribute values
Fix uniqueness plugins * add uniqueness-subtree-entries-oc:posixAccount to ensure idviews users will not be forced to have unique uid * remove unneded update plugins -> update was moved to .update file * add uniqueness-across-all-subtrees required by user lifecycle management Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
2015-02-23 10:46:46 -06:00
uniqueness-subtrees: cn=accounts,$SUFFIX
uniqueness-subtrees: cn=deleted users,cn=accounts,cn=provisioning,$SUFFIX
uniqueness-across-all-subtrees: on
- also ensure that krbCanonicalName is unique
2010-02-04 10:07:48 -06:00
Enforce netgroup uniqueness, allow netgroups to be members of netgroups When adding an entry, convert a constraint violation of "already exists" into a DuplicateEntry exception so the user gets a useful response
2009-02-25 12:50:43 -06:00
dn: cn=netgroup uniqueness,cn=plugins,cn=config
changetype: add
objectClass: top
objectClass: nsSlapdPlugin
objectClass: extensibleObject
cn: netgroup uniqueness
nsslapd-pluginPath: libattr-unique-plugin
nsslapd-pluginInitfunc: NSUniqueAttr_Init
nsslapd-pluginType: preoperation
nsslapd-pluginEnabled: on
Migrate uniquess plugins configuration to new style New configuration style contains options required for user lifecycle management. Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
2015-02-23 09:09:25 -06:00
uniqueness-attribute-name: cn
uniqueness-subtrees: cn=ng,cn=alt,$SUFFIX
Enforce netgroup uniqueness, allow netgroups to be members of netgroups When adding an entry, convert a constraint violation of "already exists" into a DuplicateEntry exception so the user gets a useful response
2009-02-25 12:50:43 -06:00
nsslapd-plugin-depends-on-type: database
nsslapd-pluginId: NSUniqueAttr
nsslapd-pluginVersion: 1.1.0
nsslapd-pluginVendor: Fedora Project
nsslapd-pluginDescription: Enforce unique attribute values
Set ipaUniqueId to be unwritable and add to uniqueness configuration. We don't want admins messing with this value. ticket 231
2010-09-15 11:02:10 -05:00
dn: cn=ipaUniqueID uniqueness,cn=plugins,cn=config
changetype: add
objectClass: top
objectClass: nsSlapdPlugin
objectClass: extensibleObject
Fixed cn attribute in ipaUniqueID uniqueness config.
2011-02-16 18:38:18 -06:00
cn: ipaUniqueID uniqueness
Set ipaUniqueId to be unwritable and add to uniqueness configuration. We don't want admins messing with this value. ticket 231
2010-09-15 11:02:10 -05:00
nsslapd-pluginPath: libattr-unique-plugin
nsslapd-pluginInitfunc: NSUniqueAttr_Init
nsslapd-pluginType: preoperation
nsslapd-pluginEnabled: on
Migrate uniquess plugins configuration to new style New configuration style contains options required for user lifecycle management. Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
2015-02-23 09:09:25 -06:00
uniqueness-attribute-name: ipaUniqueID
Set ipaUniqueId to be unwritable and add to uniqueness configuration. We don't want admins messing with this value. ticket 231
2010-09-15 11:02:10 -05:00
nsslapd-plugin-depends-on-type: database
nsslapd-pluginId: NSUniqueAttr
nsslapd-pluginVersion: 1.1.0
nsslapd-pluginVendor: Fedora Project
nsslapd-pluginDescription: Enforce unique attribute values
Fix uniqueness plugins * add uniqueness-subtree-entries-oc:posixAccount to ensure idviews users will not be forced to have unique uid * remove unneded update plugins -> update was moved to .update file * add uniqueness-across-all-subtrees required by user lifecycle management Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
2015-02-23 10:46:46 -06:00
uniqueness-subtrees: cn=accounts,$SUFFIX
uniqueness-subtrees: cn=deleted users,cn=accounts,cn=provisioning,$SUFFIX
uniqueness-across-all-subtrees: on
Set ipaUniqueId to be unwritable and add to uniqueness configuration. We don't want admins messing with this value. ticket 231
2010-09-15 11:02:10 -05:00
Add uniqueness plugin configuration for sudorule cn We do a search looking for duplicate values but this leaves open the possibility that two adds are happening at the same time so both searches return NotFound therefore we get two entries with the same cn value. https://fedorahosted.org/freeipa/ticket/3017
2012-09-13 14:11:57 -05:00
dn: cn=sudorule name uniqueness,cn=plugins,cn=config
changetype: add
objectClass: top
objectClass: nsSlapdPlugin
objectClass: extensibleObject
cn: sudorule name uniqueness
nsslapd-pluginDescription: Enforce unique attribute values
nsslapd-pluginPath: libattr-unique-plugin
nsslapd-pluginInitfunc: NSUniqueAttr_Init
nsslapd-pluginType: preoperation
nsslapd-pluginEnabled: on
Migrate uniquess plugins configuration to new style New configuration style contains options required for user lifecycle management. Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
2015-02-23 09:09:25 -06:00
uniqueness-attribute-name: cn
uniqueness-subtrees: cn=sudorules,cn=sudo,$SUFFIX
Add uniqueness plugin configuration for sudorule cn We do a search looking for duplicate values but this leaves open the possibility that two adds are happening at the same time so both searches return NotFound therefore we get two entries with the same cn value. https://fedorahosted.org/freeipa/ticket/3017
2012-09-13 14:11:57 -05:00
nsslapd-plugin-depends-on-type: database
nsslapd-pluginId: NSUniqueAttr
nsslapd-pluginVersion: 1.1.0
nsslapd-pluginVendor: Fedora Project
Reference in New Issue Copy Permalink