Alexander Bokovoy 62be554540 trust: make sure ID range is created for the child domain even if it exists ...

ID ranges for child domains of a forest trust were created incorrectly
in FreeIPA 4.4.0 due to refactoring of -- if the domain was already
existing, we never attempted to create the ID range for it.

At the same time, when domain was missing, we attempted to add ID range
and passed both forest root and the child domain names to add_range().
However, add_range() only looks at the first positional argument which
was the forest root name. That ID range always exists (it is created
before child domains are processed).

Modify the code to make sure child domain name is passed as the first
positional argument. In addition, the oddjob helper should explicitly
set context='server' so that idrange code will be able to see and use
ipaserver/dcerpc.py helpers.

Resolves: https://fedorahosted.org/freeipa/ticket/5738
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>

2016-08-22 14:03:00 +02:00

..

etc

replica promotion: fix AVC denials in remote connection check

2016-02-11 18:40:39 +01:00

com.redhat.idm.trust-fetch-domains

trust: make sure ID range is created for the child domain even if it exists

2016-08-22 14:03:00 +02:00

Makefile.am

replica install: add remote connection check over API

2015-12-11 18:44:13 +01:00

org.freeipa.server.conncheck

Do not log to file in remote conncheck side

2016-07-01 09:05:33 +02:00