Alexander Bokovoy 0b29bfde0d trusts: support subdomains in a forest ... Add IPA CLI to manage trust domains. ipa trust-fetch-domains <trust> -- fetch list of subdomains from AD side and add new ones to IPA ipa trustdomain-find <trust> -- show all available domains ipa trustdomain-del <trust> <domain> -- remove domain from IPA view about <trust> ipa trustdomain-enable <trust> <domain> -- allow users from trusted domain to access resources in IPA ipa trustdomain-disable <trust> <domain> -- disable access to resources in IPA from trusted domain By default all discovered trust domains are allowed to access IPA resources IPA KDC needs also information for authentication paths to subdomains in case they are not hierarchical under AD forest trust root. This information is managed via capaths section in krb5.conf. SSSD should be able to generate it once ticket https://fedorahosted.org/sssd/ticket/2093 is resolved. part of https://fedorahosted.org/freeipa/ticket/3909		2013-10-04 10:25:31 +02:00
..
__init__.py	Change FreeIPA license to GPLv3+	2010-12-20 17:19:53 -05:00
aci.py	Use LDAP search instead of *group_show to check if a group exists.	2013-07-11 12:39:25 +03:00
automember.py	Remove DN normalization from the baseldap plugin.	2013-03-01 16:59:47 +01:00
automount.py	Remove unneeded python-ldap imports	2013-03-13 12:36:34 +01:00
baseldap.py	Use correct super-calls in get_args() methods	2013-10-02 16:09:07 +02:00
batch.py	Add the version option to all Commands	2013-02-21 16:26:09 +01:00
cert.py	Remove obsolete self-sign references from man pages, docstrings, comments	2013-04-15 16:56:06 -04:00
config.py	Use LDAP search instead of *group_show to check if a group exists.	2013-07-11 12:39:25 +03:00
delegation.py	Update plugin docstrings (topic help) to reflect dropped CSV support	2013-02-22 17:20:35 +01:00
dns.py	Remove support for IPA deployments with no persistent search	2013-08-09 12:14:42 +02:00
group.py	Filter groups by type (POSIX, non-POSIX, external)	2013-04-09 19:00:30 +02:00
hbacrule.py	Deprecate HBAC source hosts from CLI	2013-04-12 14:07:55 -04:00
hbacsvc.py	ticket 1669 - improve i18n docstring extraction	2011-08-24 23:13:16 -04:00
hbacsvcgroup.py	Improve help text for HBAC service groups	2013-04-18 17:29:07 -04:00
hbactest.py	ipaserver/dcerpc: attempt to resolve SIDs through SSSD first	2013-07-23 16:24:38 +03:00
host.py	Improve help entry for ipa host	2013-08-06 12:31:16 +02:00
hostgroup.py	Use LDAP search instead of *group_show to check for a group objectclass.	2013-07-11 12:39:26 +03:00
idrange.py	Refactor the interactive prompt logic in idrange_add	2013-07-26 13:57:35 +02:00
internal.py	Add base-id, range-size and range-type options to trust-add dialog	2013-08-22 15:23:56 +02:00
kerberos.py	Use fully qualified CCACHE names	2013-02-01 08:13:50 +01:00
krbtpolicy.py	Use full DNs in plugin code.	2013-03-01 16:59:47 +01:00
migration.py	Use valid LDAP search base in migration plugin	2013-07-26 13:42:22 +02:00
misc.py	ticket 1669 - improve i18n docstring extraction	2011-08-24 23:13:16 -04:00
netgroup.py	Use LDAP search instead of *group_show to check if a group exists.	2013-07-11 12:39:25 +03:00
passwd.py	Add the version option to all Commands	2013-02-21 16:26:09 +01:00
permission.py	Remove DN normalization from the baseldap plugin.	2013-03-01 16:59:47 +01:00
ping.py	Allow API plugin registration via a decorator	2013-08-14 12:08:27 +02:00
pkinit.py	Internationalization for public errors	2012-09-03 18:16:12 +02:00
privilege.py	Removal of memberofindirect_permissons from privileges	2012-04-09 22:12:39 -04:00
pwpolicy.py	Limit pwpolicy maxlife to 20000 days	2013-08-05 17:50:31 +02:00
realmdomains.py	Integrate realmdomains with IPA DNS	2013-04-16 15:50:24 +02:00
role.py	Only apply validation rules when adding and updating.	2012-02-29 18:00:45 -05:00
selfservice.py	Update plugin docstrings (topic help) to reflect dropped CSV support	2013-02-22 17:20:35 +01:00
selinuxusermap.py	Use full DNs in plugin code.	2013-03-01 16:59:47 +01:00
service.py	Fix service-disable in CA-less install.	2013-08-29 10:18:32 +02:00
sudocmd.py	Use full DNs in plugin code.	2013-03-01 16:59:47 +01:00
sudocmdgroup.py	Update plugin docstrings (topic help) to reflect dropped CSV support	2013-02-22 17:20:35 +01:00
sudorule.py	Fix output for some CLI commands	2013-04-11 15:57:45 +02:00
trust.py	trusts: support subdomains in a forest	2013-10-04 10:25:31 +02:00
user.py	Remove word 'field' from GECOS param label	2013-07-23 15:32:13 +02:00
virtual.py	Internationalization for public errors	2012-09-03 18:16:12 +02:00
xmlclient.py	Change FreeIPA license to GPLv3+	2010-12-20 17:19:53 -05:00