IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2026-08-13 06:25:00 -05:00
Code Issues Packages Projects Releases Wiki Activity
14,123 Commits 11 Branches 63 Tags
3f5f68e770bc720b130a8f7fb6d54d2ae62e6f4c
Commit Graph
6 Commits
Author SHA1 Message Date
Alexander Bokovoy 28389fe8af Add design page for managing IPA resources as a user from a trusted Active Directory forest 
Fixes: https://pagure.io/freeipa/issue/8357
Fixes: https://pagure.io/freeipa/issue/7816

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
 2020-06-08 12:39:34 -04:00
Christian Heimes 9f2553c64f Add explicit syntax language to code blocks 
m2r converts code blocks into ReST code blocks with syntax highlighting.
Auto-detection of the language does not work correctly, though.
Explicitly set the language for console, ini, and Python blocks.

Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-by: Alexander Bokovoy <abokovoy@redhat.com>
 2020-03-21 07:42:20 +02:00
Tibor Dudlák c18ee9b641 Add SMB attributes for users 
SMB attributes are used by Samba domain controller when reporting
details about IPA users via LSA DCE RPC calls.

Based on the initial work from the external plugin:
https://github.com/abbra/freeipa-user-trust-attributes

Related: https://pagure.io/freeipa/issue/3999

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Signed-off-by: Tibor Dudlák <tdudlak@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Tibor Dudlak <tdudlak@redhat.com>
 2019-07-01 13:21:21 +02:00
Alexander Bokovoy 84201e1daf adtrust: add design document for Samba domain member on IPA client 
Document general design for Samba file server running on IPA client as a
domain member in IPA domain.

Fixes: https://pagure.io/freeipa/issue/3999
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Christian Heimes <cheimes@redhat.com>
 2019-06-29 11:00:28 +03:00
Alexander Bokovoy 34bfffd1be adtrust upgrade: fix wrong primary principal name 
Upgrade code had Kerberos principal names mixed up: instead of creating
krbtgt/LOCAL-FLAT@REMOTE and marking LOCAL-FLAT$@REMOTE as an alias to
it, it created LOCAL-FLAT$@REMOTE Kerberos principal and marked
krbtgt/LOCAL-FLAT@REMOTE as an alias.

This differs from what Active Directory expects and what is created by
ipasam plugin when trust is established. When upgrading such deployment,
an upgrade code then unexpectedly failed.

Resolves: https://pagure.io/freeipa/issue/7992
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
 2019-06-26 10:50:45 +02:00
Alexander Bokovoy 2a8176ee03 Add design page for one-way trust to AD with shared secret 
Reviewed-By: Christian Heimes <cheimes@redhat.com>
 2019-03-28 14:08:19 +01:00