mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-25 16:31:08 -06:00
7279ef1d0f
To make the code more general, moved the update_dna_shared_config among other update plugins. Bugfix: DNA shared config connection protocol was compared to a method string which would result in a try to always update it even if there was no need to. https://fedorahosted.org/389/ticket/48373 causes that two shared DNA config entries are created instead of one. https://fedorahosted.org/freeipa/ticket/6392 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com> Reviewed-By: Jan Cholasta <jcholast@redhat.com>
25 lines
712 B
Plaintext
25 lines
712 B
Plaintext
# add plugin configuration for user private groups
|
|
|
|
dn: cn=Posix IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config
|
|
changetype: add
|
|
objectclass: top
|
|
objectclass: extensibleObject
|
|
cn: Posix IDs
|
|
dnaType: uidNumber
|
|
dnaType: gidNumber
|
|
dnaNextValue: eval($IDSTART)
|
|
dnaMaxValue: eval($IDMAX)
|
|
dnaMagicRegen: -1
|
|
dnaFilter: (|(objectClass=posixAccount)(objectClass=posixGroup)(objectClass=ipaIDobject))
|
|
dnaScope: $SUFFIX
|
|
dnaThreshold: 500
|
|
dnaSharedCfgDN: cn=posix-ids,cn=dna,cn=ipa,cn=etc,$SUFFIX
|
|
dnaExcludeScope: cn=provisioning,$SUFFIX
|
|
|
|
# Enable the DNA plugin
|
|
dn: cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config
|
|
changetype: modify
|
|
replace: nsslapd-pluginEnabled
|
|
nsslapd-pluginEnabled: on
|
|
|