IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2024-12-23 23:50:03 -06:00
Code Issues Packages Projects Releases Wiki Activity
9,942 Commits 11 Branches 59 Tags 60 MiB
Python 75.7%
JavaScript 10.9%
C 10.8%
Roff 1.1%
Makefile 0.4%
Other 1.1%
62be554540
Go to file
Alexander Bokovoy 62be554540 trust: make sure ID range is created for the child domain even if it exists 
ID ranges for child domains of a forest trust were created incorrectly
in FreeIPA 4.4.0 due to refactoring of -- if the domain was already
existing, we never attempted to create the ID range for it.

At the same time, when domain was missing, we attempted to add ID range
and passed both forest root and the child domain names to add_range().
However, add_range() only looks at the first positional argument which
was the forest root name. That ID range always exists (it is created
before child domains are processed).

Modify the code to make sure child domain name is passed as the first
positional argument. In addition, the oddjob helper should explicitly
set context='server' so that idrange code will be able to see and use
ipaserver/dcerpc.py helpers.

Resolves: https://fedorahosted.org/freeipa/ticket/5738
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
2016-08-22 14:03:00 +02:00
asn1 Additional coverity fixes. 2016-08-16 12:33:27 +02:00
checks Add CA argument to ra.request_certificate 2016-06-15 07:13:38 +02:00
client install: Call hostnamectl set-hostname only if --hostname option is used 2016-08-10 10:48:05 +02:00
contrib Modernize mod_nss's cipher suites 2016-02-11 10:44:29 +01:00
daemons ipa-kdb: Allow to build with samba 4.5 2016-08-09 14:37:49 +02:00
doc install: Call hostnamectl set-hostname only if --hostname option is used 2016-08-10 10:48:05 +02:00
init Configure httpd service from installer instead of directly from RPM 2016-04-22 10:19:25 +02:00
install trust: make sure ID range is created for the child domain even if it exists 2016-08-22 14:03:00 +02:00
ipaclient schema cache: Fallback to 'en_us' when locale is not available 2016-08-18 12:12:51 +02:00
ipalib trust: automatically resolve DNS trust conflicts for triangle trusts 2016-08-22 13:31:47 +02:00
ipaplatform support schema files from third-party plugins 2016-08-19 15:34:26 +02:00
ipapython Remove forgotten print from DN.__str__ implementation 2016-08-19 13:04:52 +02:00
ipaserver trust: make sure ID range is created for the child domain even if it exists 2016-08-22 14:03:00 +02:00
ipatests Tests: Fix failing tests in test_ipalib/test_frontend 2016-08-17 17:41:08 +02:00
util Migrate from #ifndef guards to #pragma once 2016-05-29 14:04:45 +02:00
.gitignore Split ipa-client/ into ipaclient/ (Python library) and client/ (C, scripts) 2016-01-27 12:09:02 +01:00
.mailmap Update Contributors.txt 2016-06-24 12:49:39 +02:00
ACI.txt Provide API for management of host, service, and user principal aliases 2016-07-01 09:37:25 +02:00
API.txt service: add flag to allow S4U2Self 2016-08-17 16:41:38 +02:00
autogen.sh build tweaks - use automake's foreign mode, avoid creating empty files to satisfy gnu mode - run autoreconf -f to ensure that everything matches 2010-11-29 11:39:55 -05:00
BUILD.txt BUILD: Remove detection of libcheck 2016-04-22 13:21:26 +02:00
Contributors.txt Update Contributors.txt 2016-06-24 12:49:39 +02:00
COPYING Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
COPYING.openssl Add a clear OpenSSL exception. 2015-02-23 16:25:54 +01:00
freeipa.spec.in support schema files from third-party plugins 2016-08-19 15:34:26 +02:00
ipa Revert "Switch /usr/bin/ipa to Python 3" 2016-06-14 13:07:04 +02:00
ipa.1 Updated ipa command man page 2016-05-03 17:41:19 +02:00
lite-server.py Port from python-krbV to python-gssapi 2015-08-26 09:41:36 +02:00
make-doc Make an ipa-tests package 2013-06-17 19:22:50 +02:00
make-test Switch make-test to pytest 2014-11-21 12:14:44 +01:00
makeaci makeaci, makeapi, oddjob: use the default API context 2016-06-30 14:09:24 +02:00
makeapi ipalib: introduce Principal parameter 2016-07-01 09:37:25 +02:00
Makefile Add jslint into Makefile 2016-08-09 12:59:54 +02:00
MANIFEST.in Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
pylint_plugins.py ipalib: introduce Principal parameter 2016-07-01 09:37:25 +02:00
pylintrc pylint: replace Refactor category with individual check names 2016-05-20 14:39:05 +02:00
pytest.ini Configure pytest to run doctests 2014-11-21 12:14:44 +01:00
README Update README and BUILD 2014-02-12 14:04:07 +01:00
setup.py build: fix client-only build 2016-05-19 15:52:06 +02:00
VERSION service: add flag to allow S4U2Self 2016-08-17 16:41:38 +02:00
version.m4.in Mass tree reorganization for IPAv2. To view previous history of files use: 2009-02-03 15:27:14 -05:00
zanata.xml Translations: remove deprecated locale configuration 2016-05-31 13:50:07 +02:00

README 

                               IPA Server

  Overview
  --------

  FreeIPA allows Linux administrators to centrally manage identity,
  authentication and access control aspects of Linux and UNIX systems
  by providing simple to install and use command line and web based
  managment tools.
  FreeIPA is built on top of well known Open Source components and standard
  protocols with a very strong focus on ease of management and automation
  of installation and configuration tasks.
  FreeIPA can seamlessly integrate into an Active Directory environment via
  cross-realm Kerberos trust or user synchronization.

  Benefits
  --------

  FreeIPA:
  * Allows all your users to access all the machines with the same credentials
    and security settings
  * Allows users to access personal files transparently from any machine in
    an authenticated and secure way
  * Uses an advanced grouping mechanism to restrict network access to services
    and files only to specific users
  * Allows central management of security mechanisms like passwords,
    SSH Public Keys, SUDO rules, Keytabs, Access Control Rules
  * Enables delegation of selected administrative tasks to other power users
  * Integrates into Active Directory environments

  Components
  ----------

  The FreeIPA project provides unified installation and management
  tools for the following components:

  * LDAP Server - based on the 389 project (LDAP)
    http://directory.fedoraproject.org/wiki/Main_Page

  * KDC - based on MIT Kerberos implementation
    http://k5wiki.kerberos.org/wiki/Main_Page

  * PKI based on Dogtag project
    http://pki.fedoraproject.org/wiki/PKI_Main_Page

  * Samba libraries for Active Directory integration
    http://www.samba.org/

  * DNS Server based on BIND and the Bind-DynDB-LDAP plugin
    https://www.isc.org/software/bind
    https://fedorahosted.org/bind-dyndb-ldap


  Project Website
  ---------------

  Releases, announcements and other information can be found on the IPA
  server project page at <http://www.freeipa.org/>.

  Documentation
  -------------

  The most up-to-date documentation can be found at
  <http://freeipa.org/page/Documentation>.

  Quick Start
  -----------

  To get started quickly, start here:
  <http://www.freeipa.org/page/Quick_Start_Guide>

  Licensing
  ---------

  Please see the file called COPYING.

  Contacts
  --------

     * If you want to be informed about new code releases, bug fixes,
       security fixes, general news and information about the IPA server
       subscribe to the freeipa-announce mailing list at
       <https://www.redhat.com/mailman/listinfo/freeipa-interest/>.

     * If you have a bug report please submit it at:
       <https://bugzilla.redhat.com>

     * If you want to participate in actively developing IPA please
       subscribe to the freeipa-devel mailing list at
       <https://www.redhat.com/mailman/listinfo/freeipa-devel/> or join
       us in IRC at irc://irc.freenode.net/freeipa