Christian Heimes 1c4ae37293 Add basic support for subordinate user/group ids ...

New LDAP object class "ipaUserSubordinate" with four new fields:
- ipasubuidnumber / ipasubuidcount
- ipasubgidnumber / ipasgbuidcount

New self-service permission to add subids.

New command user-auto-subid to auto-assign subid

The code hard-codes counts to 65536, sets subgid equal to subuid, and
does not allow removal of subids. There is also a hack that emulates a
DNA plugin with step interval 65536 for testing.

Work around problem with older SSSD clients that fail with unknown
idrange type "ipa-local-subid", see: https://github.com/SSSD/sssd/issues/5571

Related: https://pagure.io/freeipa/issue/8361
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Francois Cami <fcami@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>

2021-07-09 09:47:30 -04:00

..

azure

Add Custodia tests

2021-06-16 10:28:17 -04:00

man

Simplify ipa-run-tests script

2019-07-16 13:23:21 +03:00

prci_definitions

Add basic support for subordinate user/group ids

2021-07-09 09:47:30 -04:00

pytest_ipa

ipatests: use non-ascii chars in CA-less install

2021-06-16 11:25:08 -04:00

test_cmdline

Make tab completion in console more useful

2020-07-07 12:36:10 +02:00

test_custodia

Also drop Custodia client and forwarder

2021-06-16 10:28:17 -04:00

test_install

Unify access to FQDN

2020-10-26 17:11:19 +11:00

test_integration

Add basic support for subordinate user/group ids

2021-07-09 09:47:30 -04:00

test_ipaclient

Remove support for csrgen

2021-01-21 13:51:45 +01:00

test_ipalib

When loading certificates verify that it is X.509 v3

2021-06-14 15:19:42 -04:00

test_ipaplatform

ipatests: Update expectations for test_detect_container

2021-05-25 10:45:49 +03:00

test_ipapython

Return a copy of cached entries, only with requested attributes

2021-06-29 14:55:50 +03:00

test_ipaserver

ds: Support renaming of a replication plugin in 389-ds

2021-06-01 17:09:28 +03:00

test_ipatests_plugins

ipatests: Don't turn Pytest IPA deprecation warnings into errors

2020-07-29 15:10:00 -04:00

test_webui

WebUI tests: Add test for 'ipaautoprivategroups' field on 'ID Ranges' page

2021-06-03 14:55:56 +02:00

test_xmlrpc

Add basic support for subordinate user/group ids

2021-07-09 09:47:30 -04:00

__init__.py

Make an ipa-tests package

2013-06-17 19:22:50 +02:00

conftest.py

ipatests: Don't turn Pytest IPA deprecation warnings into errors

2020-07-29 15:10:00 -04:00

create_external_ca.py

Test external CA with DNS name constraints

2019-08-06 12:39:46 +02:00

data.py

Fix more bytes/unicode issues

2015-10-22 18:34:46 +02:00

i18n.py

Sprinkle raw strings across the code base

2018-09-27 10:23:03 +02:00

ipa-run-tests

ipatests: Specify shell implementation

2020-04-21 13:24:50 +02:00

ipa-test-config

Rename pytest_plugins to ipatests.pytest_ipa

2018-08-02 17:07:43 +02:00

ipa-test-task

ipatests: Fetch sudo rules without time offset

2021-06-03 09:21:45 +03:00

Makefile.am

Build: fix distribution of static files for web UI

2016-11-09 13:08:32 +01:00

setup.cfg

Port all setup.py to setuptools

2016-10-20 18:43:37 +02:00

setup.py

Add Custodia tests

2021-06-16 10:28:17 -04:00

test_util.py

Fix E712 comparison to True / False

2020-05-05 10:42:46 +02:00

util.py

ipatests: Remove no longer needed 'skip' compatibility

2020-04-21 13:24:50 +02:00