freeipa/doc
Christian Heimes 1c4ae37293 Add basic support for subordinate user/group ids
New LDAP object class "ipaUserSubordinate" with four new fields:
- ipasubuidnumber / ipasubuidcount
- ipasubgidnumber / ipasgbuidcount

New self-service permission to add subids.

New command user-auto-subid to auto-assign subid

The code hard-codes counts to 65536, sets subgid equal to subuid, and
does not allow removal of subids. There is also a hack that emulates a
DNA plugin with step interval 65536 for testing.

Work around problem with older SSSD clients that fail with unknown
idrange type "ipa-local-subid", see: https://github.com/SSSD/sssd/issues/5571

Related: https://pagure.io/freeipa/issue/8361
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Francois Cami <fcami@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
2021-07-09 09:47:30 -04:00
..
designs Add basic support for subordinate user/group ids 2021-07-09 09:47:30 -04:00
examples Have all the scripts run in python 3 by default 2018-02-15 18:43:12 +01:00
guide logging: do not reference loggers in arguments and attributes 2017-07-14 15:55:59 +02:00
workshop workshop: Update docs and support default cloud image 2021-06-07 10:49:57 +02:00
conf.py Create ipasphinx package for Sphinx plugins 2020-04-28 20:03:21 +02:00
index.rst Include workshop in sphinx build 2020-03-21 07:40:34 +02:00
Makefile workshop: Update docs and support default cloud image 2021-06-07 10:49:57 +02:00
requirements.txt Require Sphinx >2.1 2020-04-29 12:36:34 +02:00
workshop.rst workshop: Update docs and support default cloud image 2021-06-07 10:49:57 +02:00