mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-24 16:10:02 -06:00
a48a84a5ea
The default precedence for plugins is 50 and the run in more or less alphabetical order (but not guaranteed). This plugin needs to run after the others have already done their work. https://fedorahosted.org/freeipa/ticket/1370
11 lines
411 B
Plaintext
11 lines
411 B
Plaintext
# Enforce matching SSL certificate host names when 389-ds acts as an SSL
|
|
# client. A restart is necessary for this to take effect, we do one when
|
|
# upgrading.
|
|
dn: cn=config
|
|
only:nsslapd-ssl-check-hostname: on
|
|
|
|
# Set the precedence of the ipa-modrdn plugin so it runs after other
|
|
# plugins (the default is 50).
|
|
dn: cn=Kerberos Principal Name,cn=IPA MODRDN,cn=plugins,cn=config
|
|
only: nsslapd-pluginPrecedence: 60
|