Rob Crittenden 34534a026f Don't use camel-case LDAP attributes in ACI and don't clear enrolledBy ...

We keep LDAP attributes lower-case elsewhere in the API we should do the
same with all access controls.

There were two ACIs pointing at the manage_host_keytab permission. This
isn't allowed in general and we have decided separately to not clear out
enrolledBy when a host is unenrolled so dropping it is the obvious thing
to do.

ticket 597

2010-12-17 18:04:37 -05:00

..

05rfc2247.ldif

Incorporate new schema for IPAv2

2009-02-11 17:13:41 -05:00

60basev2.ldif

Remove group nesting from the HBAC service groups

2010-10-28 17:34:34 -04:00

60ipaconfig.ldif

ipaHomesRootDir was changes to an IA5 string, change the matching rule too

2010-12-08 17:10:17 -05:00

60ipasudo.ldif

Rename 60sudo.ldif to 60ipasudo.ldif to not overwrite the 389-ds version.

2010-11-09 13:30:45 -05:00

60kerberos.ldif

Use kerberos password policy.

2010-11-01 14:15:42 -04:00

60policyv2.ldif

Re-number some attributes to compress our usage to be contiguous

2010-05-27 10:50:49 -04:00

60radius.ldif

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

60samba.ldif

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

anonymous-vlv.ldif

Let anonymous users browse the VLV index

2009-07-10 16:45:45 -04:00

bind.named.conf.template

named.conf: Add trailing dot to the fake_mname

2010-05-06 10:27:21 -04:00

bind.zone.db.template

Add new DNS install argument for setting the zone mgr e-mail addr.

2010-09-23 12:00:12 -04:00

bootstrap-template.ldif

Move automount, default HBAC services, netgroup and hostgroup bootstrapping.

2010-12-17 17:31:19 -05:00

caJarSigningCert.cfg.template

Add signing profile to CA installation so we can sign the firefox jar file.

2009-05-04 16:54:42 -04:00

certmap.conf.template

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

default-aci.ldif

Don't use camel-case LDAP attributes in ACI and don't clear enrolledBy

2010-12-17 18:04:37 -05:00

default-hbac.ldif

UUIDs: remove uuid python plugin and let DS always autogenerate

2010-10-28 07:58:31 -04:00

default-keytypes.ldif

pwd-plugin: Always use a special salt by default.

2010-10-28 17:18:03 -04:00

default-pwpolicy.ldif

Use kerberos password policy.

2010-11-01 14:15:42 -04:00

delegation.ldif

Don't use camel-case LDAP attributes in ACI and don't clear enrolledBy

2010-12-17 18:04:37 -05:00

dna.ldif

id ranges: change DNA configuration

2010-11-22 12:42:16 -05:00

dns.ldif

Fix the change_password permissions and the DNS access controls.

2010-12-17 17:16:25 -05:00

ds-nfiles.ldif

Autotune directory server to use a greater number of files

2010-11-22 12:42:16 -05:00

encrypted_attribute.ldif

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

entryusn.ldif

Enable EntryUSN plugin by default, with global scope

2010-11-30 18:26:40 -05:00

fedora-ds.init.patch

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

host_nis_groups.ldif

managed entry hostgroup netgroup support https://fedorahosted.org/freeipa/ticket/543

2010-12-13 17:56:12 -05:00

indices.ldif

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

kdc_extensions.template

Add support for configuring KDC certs for PKINIT

2010-11-18 15:09:36 -05:00

kdc_req.conf.template

Add support for configuring KDC certs for PKINIT

2010-11-18 15:09:36 -05:00

kdc.conf.template

Add support for configuring KDC certs for PKINIT

2010-11-18 15:09:36 -05:00

kerberos.ldif

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

key_escrow_schema.ldif

Re-number some attributes to compress our usage to be contiguous

2010-05-27 10:50:49 -04:00

krb5.conf.template

pkinit: always configure pkinit_anchors in krb5.conf

2010-11-18 15:09:40 -05:00

krb5.ini.template

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

krb.con.template

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

krbrealm.con.template

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

ldapi.ldif

Enable ldapi connections in the management framework.

2009-08-27 13:36:58 -04:00

Makefile.am

managed entry hostgroup netgroup support https://fedorahosted.org/freeipa/ticket/543

2010-12-13 17:56:12 -05:00

master-entry.ldif

Use nsContainer and not extensibleObject for masters entries

2010-12-15 10:58:03 -05:00

memberof-conf.ldif

Display user and host membership in netgroups.

2010-11-24 08:38:41 -05:00

memberof-task.ldif

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

modrdn-krbprinc.ldif

ipa-modrdn: Enable plugin to handle krbPrincipalName on renames

2010-10-28 07:58:31 -04:00

nis.uldif

add support for hostCategory and userCategory

2010-11-04 14:43:03 -04:00

preferences.html.template

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

referint-conf.ldif

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

schema_compat.uldif

add support for hostCategory and userCategory

2010-11-04 14:43:03 -04:00

unique-attributes.ldif

Set ipaUniqueId to be unwritable and add to uniqueness configuration.

2010-09-20 15:59:53 -04:00

user_private_groups.ldif

Create user private groups with a uniqueid.

2010-11-30 09:52:05 -05:00

uuid-ipauniqueid.ldif

UUIDs: remove uuid python plugin and let DS always autogenerate

2010-10-28 07:58:31 -04:00

wsgi.py

Ensure that Apache is running with MPM=Prefork

2010-11-22 12:35:52 -05:00