IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-01-15 19:01:55 -06:00
Code Issues Packages Projects Releases Wiki Activity
63becae88c
freeipa/ipalib/plugins
History
Petr Viktorin 63becae88c Set user addressbook/IPA attribute read ACI to anonymous on upgrades from 3.x 
When upgrading from an "old" IPA, or installing the first "new" replica,
we need to keep allowing anonymous access to many user attributes.

Add an optional 'fixup_function' to the managed permission templates,
and use it to set the bind rule type to 'anonymous' when installing
(or upgrading to) the first "new" master.

This assumes that the anonymous read ACI will be removed in a "new" IPA.

Part of the work for: https://fedorahosted.org/freeipa/ticket/3566

Reviewed-By: Martin Kosek <mkosek@redhat.com>
2014-05-26 12:12:35 +02:00
..
__init__.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
aci.py Allow primary keys to use different type than unicode. 2014-04-18 14:59:20 +02:00
automember.py Allow primary keys to use different type than unicode. 2014-04-18 14:59:20 +02:00
automount.py Allow primary keys to use different type than unicode. 2014-04-18 14:59:20 +02:00
baseldap.py Use raw attribute values in command result when --raw is specified. 2014-04-18 14:59:20 +02:00
batch.py Add the version option to all Commands 2013-02-21 16:26:09 +01:00
cert.py Remove unused function get_subjectaltname from the cert plugin. 2014-03-25 16:54:55 +01:00
config.py Add managed read permission to config 2014-04-15 10:42:31 +02:00
delegation.py Allow primary keys to use different type than unicode. 2014-04-18 14:59:20 +02:00
dns.py Allow primary keys to use different type than unicode. 2014-04-18 14:59:20 +02:00
group.py Allow primary keys to use different type than unicode. 2014-04-18 14:59:20 +02:00
hbacrule.py Allow primary keys to use different type than unicode. 2014-04-18 14:59:20 +02:00
hbacsvc.py Add managed read permissions to HBAC objects 2014-04-09 13:40:42 +02:00
hbacsvcgroup.py Add managed read permissions to HBAC objects 2014-04-09 13:40:42 +02:00
hbactest.py Convert remaining frontend code to LDAPEntry API. 2014-01-24 20:38:15 +01:00
host.py Allow primary keys to use different type than unicode. 2014-04-18 14:59:20 +02:00
hostgroup.py Add managed read permission to hostgroup 2014-04-09 17:14:29 +02:00
idrange.py Add managed read permission to idrange 2014-04-16 16:37:43 +02:00
internal.py webui: field and widget binding refactoring 2014-04-03 12:40:37 +02:00
kerberos.py Use fully qualified CCACHE names 2013-02-01 08:13:50 +01:00
krbtpolicy.py Allow primary keys to use different type than unicode. 2014-04-18 14:59:20 +02:00
migration.py Migration does not add users to default group 2014-02-05 16:47:37 +01:00
misc.py ticket 1669 - improve i18n docstring extraction 2011-08-24 23:13:16 -04:00
netgroup.py Add Object metadata and update plugin for managed permissions 2014-03-25 14:18:12 +01:00
otptoken.py Default the token owner to the person adding the token 2014-05-23 11:53:02 +03:00
passwd.py Convert remaining frontend code to LDAPEntry API. 2014-01-24 20:38:15 +01:00
permission.py Add managed read permissions to RBAC objects 2014-04-11 10:17:41 +02:00
ping.py Allow API plugin registration via a decorator 2013-08-14 12:08:27 +02:00
pkinit.py Convert remaining frontend code to LDAPEntry API. 2014-01-24 20:38:15 +01:00
privilege.py Add managed read permissions to RBAC objects 2014-04-11 10:17:41 +02:00
pwpolicy.py plugin registration refactoring for pwpolicy 2014-05-06 14:15:21 +02:00
radiusproxy.py Add RADIUS proxy support to ipalib CLI 2013-12-03 14:49:10 +01:00
realmdomains.py Add managed read permissions to realmdomains 2014-04-11 10:17:41 +02:00
role.py Add managed read permissions to RBAC objects 2014-04-11 10:17:41 +02:00
rpcclient.py Switch client to JSON-RPC 2013-11-26 16:59:59 +01:00
selfservice.py Allow primary keys to use different type than unicode. 2014-04-18 14:59:20 +02:00
selinuxusermap.py Allow primary keys to use different type than unicode. 2014-04-18 14:59:20 +02:00
service.py Add managed read permission to service 2014-04-24 11:46:23 +02:00
sudocmd.py Add managed read permissions to Sudo objects 2014-04-09 16:12:18 +02:00
sudocmdgroup.py Add managed read permissions to Sudo objects 2014-04-09 16:12:18 +02:00
sudorule.py Allow primary keys to use different type than unicode. 2014-04-18 14:59:20 +02:00
trust.py Make trust objects available to regular users 2014-04-28 16:18:55 +02:00
user.py Set user addressbook/IPA attribute read ACI to anonymous on upgrades from 3.x 2014-05-26 12:12:35 +02:00
virtual.py Internationalization for public errors 2012-09-03 18:16:12 +02:00