IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity
Files
a60ee8b7810ed2dbe0affe91112c4d7c95394018
freeipa/install/updates/Makefile.am

35 lines
684 B
Makefile
Raw Normal View History

Update files for the schema compatibility plugin and RFC4876 profiles Also handle syntax errors a bit more gracefully and allow the updater to work on more than one file at a time. Adjust to new config.py and use a custom exception class for syntax errors. Also fix a error in parsing the separate files Include slapi-nis in Requires Includes work provided by Martin Nagy 460055
2008-09-10 15:56:11 -04:00
NULL =
appdir = $(IPA_DATA_DIR)/updates
app_DATA = \
Fix ORDERING in some attributetypes and remove other unnecessary elements. Looking at the schema in 60basev2.ldif there were many attributes that did not have an ORDERING matching rule specified correctly. There were also a number of attributeTypes that should have been just SUP distinguishedName that had a combination of SUP, SYNTAX, ORDERING, etc. This requires 389-ds-base-1.2.8.0-1+ ticket 1153
2011-04-05 16:28:59 -04:00
10-60basev2.update \
Name update files so they can be easily sorted. We want to process some updates in a particular order (schema, structural). Using an init-inspired ordering mechanism.
2009-03-23 15:20:43 -04:00
10-RFC2307bis.update \
10-RFC4876.update \
Enable 389-ds SSL host checking by defauilt Enforce that the remote hostname matches the remote SSL server certificate when 389-ds operates as an SSL client. Also add an update file to turn this off for existing installations. This also changes the way the ldapupdater modlist is generated to be more like the framework. Single-value attributes are done as replacements and there is a list of force-replacement attributes. ticket 1069
2011-05-19 22:30:53 -04:00
10-config.update \
Correct sudo runasuser and runasgroup attributes in schema https://fedorahosted.org/freeipa/ticket/1309
2011-07-19 15:21:33 -07:00
10-sudo.update \
Move Managed Entries into their own container in the replicated space. Repoint cn=Managed Entries,cn=plugins,cn=config in common_setup Create: cn=Managed Entries,cn=etc,$SUFFIX Create: cn=Definitions,cn=Managed Entries,cn=etc,$SUFFIX Create: cn=Templates,cn=Managed Entries,cn=etc,$SUFFIX Create method for dynamically migrating any and all custom Managed Entries from the cn=config space into the new container. Separate the connection creation during update so that a restart can be performed to initialize changes before performing a delete. Add wait_for_open_socket() method in installutils https://fedorahosted.org/freeipa/ticket/1708
2011-09-08 12:07:26 -07:00
19-managed-entries.update \
Add aci to make managed netgroups immutable. ticket 962
2011-02-17 17:19:24 -05:00
20-aci.update \
Name update files so they can be easily sorted. We want to process some updates in a particular order (schema, structural). Using an init-inspired ordering mechanism.
2009-03-23 15:20:43 -04:00
20-dna.update \
Configure Managed Entries on replicas. The Managed Entries plugin configurations weren't being created on replica installs. The templates were there but the cn=config portions were not. This patch adds them as updates. The template portion will be added in the initial replication. ticket 1222
2011-05-18 15:12:22 -04:00
20-host_nis_groups.update \
Name update files so they can be easily sorted. We want to process some updates in a particular order (schema, structural). Using an init-inspired ordering mechanism.
2009-03-23 15:20:43 -04:00
20-indices.update \
20-nss_ldap.update \
20-replication.update \
Correct behavior for sudorunasgroup vs sudorunasuser https://fedorahosted.org/freeipa/ticket/1309
2011-07-19 15:19:57 -07:00
10-schema_compat.update \
Configure Managed Entries on replicas. The Managed Entries plugin configurations weren't being created on replica installs. The templates were there but the cn=config portions were not. This patch adds them as updates. The template portion will be added in the initial replication. ticket 1222
2011-05-18 15:12:22 -04:00
20-user_private_groups.update \
Name update files so they can be easily sorted. We want to process some updates in a particular order (schema, structural). Using an init-inspired ordering mechanism.
2009-03-23 15:20:43 -04:00
20-winsync_index.update \
Store list of non-master replicas in DIT and provide way to list them Fixes: https://fedorahosted.org/freeipa/ticket/1007
2011-02-28 17:35:44 -05:00
21-replicas_container.update \
Add permission/privilege for updating IPA configuration. ticket 950
2011-02-11 16:48:59 -05:00
40-delegation.update \
Add default roles and permissions for HBAC, SUDO and pw policy Created some default roles as examples. In doing so I realized that we were completely missing default rules for HBAC, SUDO and password policy so I added those as well. I ran into a problem when the updater has a default record and an add at the same time, it should handle it better now. ticket 585
2011-02-22 09:21:14 -05:00
45-roles.update \
The default groups we create should have ipaUniqueId set This adds a new directive to ipa-ldap-updater: addifnew. This will add a new attribute only if it doesn't exist in the current entry. We can't compare values because the value we are adding is automatically generated. ticket 1177
2011-04-14 14:37:45 -04:00
50-lockout-policy.update \
50-groupuuid.update \
Add additional pam ftp services to HBAC, and a ftp HBAC service group This adds proftpd, pure-ftpd, vsftpd and gssftp. https://fedorahosted.org/freeipa/ticket/1703
2011-08-24 17:28:22 -04:00
50-hbacservice.update \
Update files for the schema compatibility plugin and RFC4876 profiles Also handle syntax errors a bit more gracefully and allow the updater to work on more than one file at a time. Adjust to new config.py and use a custom exception class for syntax errors. Also fix a error in parsing the separate files Include slapi-nis in Requires Includes work provided by Martin Nagy 460055
2008-09-10 15:56:11 -04:00
$(NULL)
EXTRA_DIST = \
$(app_DATA) \
$(NULL)
MAINTAINERCLEANFILES = \
*~ \
Makefile.in
Reference in New Issue Copy Permalink