freeipa/ipatests/prci_definitions
Christian Heimes 1c4ae37293 Add basic support for subordinate user/group ids
New LDAP object class "ipaUserSubordinate" with four new fields:
- ipasubuidnumber / ipasubuidcount
- ipasubgidnumber / ipasgbuidcount

New self-service permission to add subids.

New command user-auto-subid to auto-assign subid

The code hard-codes counts to 65536, sets subgid equal to subuid, and
does not allow removal of subids. There is also a hack that emulates a
DNA plugin with step interval 65536 for testing.

Work around problem with older SSSD clients that fail with unknown
idrange type "ipa-local-subid", see: https://github.com/SSSD/sssd/issues/5571

Related: https://pagure.io/freeipa/issue/8361
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Francois Cami <fcami@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
2021-07-09 09:47:30 -04:00
..
gating.yaml Add basic support for subordinate user/group ids 2021-07-09 09:47:30 -04:00
nightly_latest_389ds.yaml Increase timeout for test_commands.py 2021-06-28 14:25:02 +03:00
nightly_latest_pki.yaml ipatests: Bump PR-CI templates to Fedora 34 2021-05-12 15:21:22 -03:00
nightly_latest_selinux.yaml Increase timeout for test_commands.py 2021-06-28 14:25:02 +03:00
nightly_latest_testing_selinux.yaml Increase timeout for test_commands.py 2021-06-28 14:25:02 +03:00
nightly_latest_testing.yaml Increase timeout for test_commands.py 2021-06-28 14:25:02 +03:00
nightly_latest.yaml Increase timeout for test_commands.py 2021-06-28 14:25:02 +03:00
nightly_previous.yaml Increase timeout for test_commands.py 2021-06-28 14:25:02 +03:00
nightly_rawhide.yaml Increase timeout for test_commands.py 2021-06-28 14:25:02 +03:00
temp_commit.yaml ipatests: Bump PR-CI boxes 2021-06-04 08:51:01 +03:00