7 Commits

Author	SHA1	Message	Date
Rob Crittenden	55512dc938	Add SELinux user mapping framework. ... This will allow one to define what SELinux context a given user gets on a given machine. A rule can contain a set of users and hosts or it can point to an existing HBAC rule that defines them. https://fedorahosted.org/freeipa/ticket/755	2011-12-09 16:46:25 +02:00
Simo Sorce	7d744f82e2	ipa-kdb: Delegation ACL schema	2011-12-08 17:18:10 -05:00
Sumit Bose	2d355da9e2	Add trust objectclass and attributes to v3 schema	2011-12-06 08:29:53 -05:00
Simo Sorce	b8f259e027	Add NT domain GUID attribute. ... We need this to be able to re-set it, as ipaUniqueID cannot be arbitraily set to a value. Only needed for the domain object.	2011-11-21 18:52:48 -05:00
Sumit Bose	c4e070c1fe	Fix typo in v3 base schema	2011-09-21 08:29:58 -04:00
Simo Sorce	89c4e9362d	schema: Add new attributes and objectclasses for AD Trusts	2011-09-20 10:41:12 -04:00
Simo Sorce	586e2eaf6c	v3-schema: Add new ipaExternalGroup objectclass ... This construct allows to have a group of ipaExternalMember attributes, that can be nested in a normal ipa Group ('memberOf' is allowed). It cannot contain normal ipa users/groups and cannot be nested with another group of the same type ('member' is not allowed).	2011-08-26 08:26:13 -04:00