freeipa/install
Matt Rogers 8a2afcafee ipa_kdb: add krbPrincipalAuthInd handling
Store and retrieve the authentication indicator "require_auth" string in
the krbPrincipalAuthInd attribute. Skip storing auth indicators to
krbExtraData.

https://fedorahosted.org/freeipa/ticket/5782

Reviewed-By: Sumit Bose <sbose@redhat.com>
2016-05-02 19:15:45 +02:00
..
certmonger Refactor ipautil.run 2015-12-14 10:54:23 +01:00
conf Add X-Frame-Options and frame-ancestors options 2016-04-15 15:44:44 +02:00
ffextension webui: append network.negotiate-auth.trusted-uris 2014-09-11 09:41:51 +02:00
html Added warning to user for Internet Explorer 2016-04-28 14:28:11 +02:00
migration Remove unused imports 2015-12-23 07:59:22 +01:00
oddjob ipaplatform: Move remaining user/group constants to ipaplatform.constants. 2016-03-23 13:32:55 +01:00
po Fix URL for reporting bugs in strings 2016-03-01 15:26:52 +01:00
restart_scripts Move freeipa certmonger helpers to libexecdir. 2016-02-26 08:29:44 +01:00
share ipa_kdb: add krbPrincipalAuthInd handling 2016-05-02 19:15:45 +02:00
tools ipa-nis-manage: mention return code 3 in man page 2016-04-29 13:49:44 +02:00
ui Added fix for notifying user about locked user account in WebUI 2016-04-28 17:04:37 +02:00
updates DS deadlock when memberof scopes topology plugin updates 2016-03-18 13:25:08 +01:00
wsgi Modernize 'except' clauses 2015-08-12 18:17:23 +02:00
configure.ac CONFIGURE: Replace obsolete macros 2016-03-08 20:02:27 +01:00
Makefile.am trusts: add support for one-way trust and switch to it by default 2015-07-08 01:56:52 +02:00
README.schema Add some basic rules for adding new schema 2010-08-27 13:40:37 -04:00

Ground rules on adding new schema

Brand new schema, particularly when written specifically for IPA, should be
added in share/*.ldif. Any new files need to be explicitly loaded in
ipaserver/install/dsinstance.py. These simply get copied directly into
the new instance schema directory.

Existing schema (e.g. in an LDAP draft) may either be added as a separate
ldif in share or as an update in the updates directory. The advantage of
adding the schema as an update is if 389-ds ever adds the schema then the
installation won't fail due to existing schema failing to load during
bootstrap.

If the new schema requires a new container then this should be added
to install/bootstrap-template.ldif.