4 Commits

Author	SHA1	Message	Date
Thierry bordaz (tbordaz)	7fc4f60c2f	User Life Cycle: DNA scopes full SUFFIX ... In patch 0001-3, the DNA plugins configuration was changed to scope only 'cn=accounts,SUFFIX' This part of the fix was invalid as trust domain object (that need uid/gid allocation) are under 'cn=trust,SUFFIX'. Revert that part of the fix. Waiting on https://fedorahosted.org/389/ticket/47828, to exclude provisioning contains https://fedorahosted.org/freeipa/ticket/3813 Reviewed-By: Martin Kosek <mkosek@redhat.com>	2014-09-01 08:16:44 +02:00
Thierry bordaz (tbordaz)	04ea75a7a5	User Life Cycle: create containers and scoping DS plugins ... User Life Cycle is designed http://www.freeipa.org/page/V4/User_Life-Cycle_Management It manages 3 containers (Staging, Active, Delete). At install/upgrade Delete and Staging containers needs to be created. Active: cn=users,cn=accounts,$SUFFIX Delete: cn=deleted users,cn=accounts,cn=provisioning,$SUFFIX Stage: cn=staged users ,cn=accounts,cn=provisioning,$SUFFIX Plugins scopes: krbPrincipalName, krbCanonicalName, ipaUniqueID, uid: cn=accounts,SUFFIX cn=deleted users,cn=accounts,cn=provisioning,SUFFIX DNA: cn=accounts,SUFFIX Plugins exclude subtree: IPA UUID, Referential Integrity, memberOf: cn=provisioning,SUFFIX https://fedorahosted.org/freeipa/ticket/3813 Reviewed-By: Petr Viktorin <pviktori@redhat.com>	2014-08-19 09:48:20 +02:00
Petr Viktorin	91606e6679	Change DNA magic value to -1 to make UID 999 usable ... Change user-add's uid & gid parameters from autofill to optional. Change the DNA magic value to -1. For old clients, which will still send 999 when they want DNA assignment, translate the 999 to -1. This is done via a new capability, optional_uid_params. Tests included https://fedorahosted.org/freeipa/ticket/2886	2013-03-11 17:07:07 +01:00
Rob Crittenden	c00281a9f9	Name update files so they can be easily sorted. ... We want to process some updates in a particular order (schema, structural). Using an init-inspired ordering mechanism.	2009-03-25 11:03:07 -04:00