IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2024-12-24 16:10:02 -06:00
Code Issues Packages Projects Releases Wiki Activity
d4a1dc5712
freeipa/install/updates/Makefile.am

44 lines
892 B
Makefile
Raw Normal View History

Update files for the schema compatibility plugin and RFC4876 profiles Also handle syntax errors a bit more gracefully and allow the updater to work on more than one file at a time. Adjust to new config.py and use a custom exception class for syntax errors. Also fix a error in parsing the separate files Include slapi-nis in Requires Includes work provided by Martin Nagy 460055
2008-09-10 14:56:11 -05:00
NULL =
appdir = $(IPA_DATA_DIR)/updates
app_DATA = \
Fix ORDERING in some attributetypes and remove other unnecessary elements. Looking at the schema in 60basev2.ldif there were many attributes that did not have an ORDERING matching rule specified correctly. There were also a number of attributeTypes that should have been just SUP distinguishedName that had a combination of SUP, SYNTAX, ORDERING, etc. This requires 389-ds-base-1.2.8.0-1+ ticket 1153
2011-04-05 15:28:59 -05:00
10-60basev2.update \
Add update file for new schema in v2.2/3.0 https://fedorahosted.org/freeipa/ticket/2147
2012-02-10 10:57:23 -06:00
10-60basev3.update \
Name update files so they can be easily sorted. We want to process some updates in a particular order (schema, structural). Using an init-inspired ordering mechanism.
2009-03-23 14:20:43 -05:00
10-RFC2307bis.update \
10-RFC4876.update \
Enable 389-ds SSL host checking by defauilt Enforce that the remote hostname matches the remote SSL server certificate when 389-ds operates as an SSL client. Also add an update file to turn this off for existing installations. This also changes the way the ldapupdater modlist is generated to be more like the framework. Single-value attributes are done as replacements and there is a list of force-replacement attributes. ticket 1069
2011-05-19 21:30:53 -05:00
10-config.update \
Add update files for SELinuxUserMap https://fedorahosted.org/freeipa/ticket/2344
2012-02-09 15:52:07 -06:00
10-selinuxusermap.update \
Correct sudo runasuser and runasgroup attributes in schema https://fedorahosted.org/freeipa/ticket/1309
2011-07-19 17:21:33 -05:00
10-sudo.update \
Add LDAP schema for SSH public keys. https://fedorahosted.org/freeipa/ticket/754
2011-12-07 01:46:23 -06:00
10-ssh.update \
Move Managed Entries into their own container in the replicated space. Repoint cn=Managed Entries,cn=plugins,cn=config in common_setup Create: cn=Managed Entries,cn=etc,$SUFFIX Create: cn=Definitions,cn=Managed Entries,cn=etc,$SUFFIX Create: cn=Templates,cn=Managed Entries,cn=etc,$SUFFIX Create method for dynamically migrating any and all custom Managed Entries from the cn=config space into the new container. Separate the connection creation during update so that a restart can be performed to initialize changes before performing a delete. Add wait_for_open_socket() method in installutils https://fedorahosted.org/freeipa/ticket/1708
2011-09-08 14:07:26 -05:00
19-managed-entries.update \
Add aci to make managed netgroups immutable. ticket 962
2011-02-17 16:19:24 -06:00
20-aci.update \
Name update files so they can be easily sorted. We want to process some updates in a particular order (schema, structural). Using an init-inspired ordering mechanism.
2009-03-23 14:20:43 -05:00
20-dna.update \
Configure Managed Entries on replicas. The Managed Entries plugin configurations weren't being created on replica installs. The templates were there but the cn=config portions were not. This patch adds them as updates. The template portion will be added in the initial replication. ticket 1222
2011-05-18 14:12:22 -05:00
20-host_nis_groups.update \
Name update files so they can be easily sorted. We want to process some updates in a particular order (schema, structural). Using an init-inspired ordering mechanism.
2009-03-23 14:20:43 -05:00
20-indices.update \
20-nss_ldap.update \
20-replication.update \
Correct behavior for sudorunasgroup vs sudorunasuser https://fedorahosted.org/freeipa/ticket/1309
2011-07-19 17:19:57 -05:00
10-schema_compat.update \
Configure Managed Entries on replicas. The Managed Entries plugin configurations weren't being created on replica installs. The templates were there but the cn=config portions were not. This patch adds them as updates. The template portion will be added in the initial replication. ticket 1222
2011-05-18 14:12:22 -05:00
20-user_private_groups.update \
Name update files so they can be easily sorted. We want to process some updates in a particular order (schema, structural). Using an init-inspired ordering mechanism.
2009-03-23 14:20:43 -05:00
20-winsync_index.update \
Store list of non-master replicas in DIT and provide way to list them Fixes: https://fedorahosted.org/freeipa/ticket/1007
2011-02-28 16:35:44 -06:00
21-replicas_container.update \
Configure s4u2proxy during installation. This creates a new container, cn=s4u2proxy,cn=etc,$SUFFIX Within that container we control which services are allowed to delegate tickets for other services. Right now that is limited from the IPA HTTP to ldap services. Requires a version of mod_auth_kerb that supports s4u2proxy https://fedorahosted.org/freeipa/ticket/1098
2012-01-10 21:39:26 -06:00
30-s4u2proxy.update \
Add permission/privilege for updating IPA configuration. ticket 950
2011-02-11 15:48:59 -06:00
40-delegation.update \
Fix DNS permissions and membership in privileges This resolves two issues: 1. The DNS acis lacked a prefix so weren't tied to permissions 2. The permissions were added before the privileges so the member values weren't calculated properly For updates we need to add in the members and recalculate memberof via a DS task. https://fedorahosted.org/freeipa/ticket/1898
2011-10-05 16:16:05 -05:00
40-dns.update \
Enable automember for upgraded servers automember functionality is depends on predefined data is in LDAP. Since we add it for fresh installs only, automember cannot be used for upgraded servers. Make sure that automember LDAP data is added during upgrade too. https://fedorahosted.org/freeipa/ticket/1992
2011-10-17 06:56:21 -05:00
40-automember.update \
Add default roles and permissions for HBAC, SUDO and pw policy Created some default roles as examples. In doing so I realized that we were completely missing default rules for HBAC, SUDO and password policy so I added those as well. I ran into a problem when the updater has a default record and an add at the same time, it should handle it better now. ticket 585
2011-02-22 08:21:14 -06:00
45-roles.update \
The default groups we create should have ipaUniqueId set This adds a new directive to ipa-ldap-updater: addifnew. This will add a new attribute only if it doesn't exist in the current entry. We can't compare values because the value we are adding is automatically generated. ticket 1177
2011-04-14 13:37:45 -05:00
50-lockout-policy.update \
50-groupuuid.update \
Add additional pam ftp services to HBAC, and a ftp HBAC service group This adds proftpd, pure-ftpd, vsftpd and gssftp. https://fedorahosted.org/freeipa/ticket/1703
2011-08-24 16:28:22 -05:00
50-hbacservice.update \
Fix nis netgroup config entry so users appear in netgroup triple. https://fedorahosted.org/freeipa/ticket/2028
2011-10-26 16:42:59 -05:00
50-nis.update \
Add SELinux user mapping framework. This will allow one to define what SELinux context a given user gets on a given machine. A rule can contain a set of users and hosts or it can point to an existing HBAC rule that defines them. https://fedorahosted.org/freeipa/ticket/755
2011-11-23 15:59:21 -06:00
50-ipaconfig.update \
Reorder privileges so that memberof for permissions are generated properly. The privilege was added after the permission causing the memberof to not be generated. Add a new task to regenerate memberof for existing PBAC to fix upgrades. https://fedorahosted.org/freeipa/ticket/2058 https://fedorahosted.org/freeipa/ticket/2059 https://fedorahosted.org/freeipa/ticket/2060 https://fedorahosted.org/freeipa/ticket/2061
2011-12-08 03:04:09 -06:00
55-pbacmemberof.update \
Update files for the schema compatibility plugin and RFC4876 profiles Also handle syntax errors a bit more gracefully and allow the updater to work on more than one file at a time. Adjust to new config.py and use a custom exception class for syntax errors. Also fix a error in parsing the separate files Include slapi-nis in Requires Includes work provided by Martin Nagy 460055
2008-09-10 14:56:11 -05:00
$(NULL)
EXTRA_DIST = \
$(app_DATA) \
$(NULL)
MAINTAINERCLEANFILES = \
*~ \
Makefile.in
Reference in New Issue Copy Permalink