freeipa/ipalib
Tomas Babej 63d4f30686 trusts: Do not pass base-id to the subdomain ranges
For trusted domains base id is calculated using a murmur3 hash of the
domain Security Identifier (SID). During trust-add we create ranges for
forest root domain and other forest domains. Since --base-id explicitly
overrides generated base id for forest root domain, its value should not
be passed to other forest domains' ranges -- their base ids must be
calculated based on their SIDs.

In case base id change for non-root forest domains is required, it can
be done manually through idrange-mod command after the trust is
established.

https://fedorahosted.org/freeipa/ticket/4041
2013-11-22 08:47:49 +01:00
..
plugins trusts: Do not pass base-id to the subdomain ranges 2013-11-22 08:47:49 +01:00
__init__.py Add IntEnum parameter to ipalib 2013-10-09 18:05:37 +02:00
aci.py Remove some unused imports 2013-03-01 16:59:42 +01:00
backend.py Add CLI parsing tests 2012-03-28 15:25:33 +02:00
base.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
capabilities.py Change DNA magic value to -1 to make UID 999 usable 2013-03-11 17:07:07 +01:00
cli.py Help plugin: don't fail if a topic's module is not found 2013-10-30 11:50:05 +01:00
config.py Use DN objects instead of strings 2012-08-12 16:23:24 -04:00
constants.py Remove entitlement support 2013-06-26 14:11:42 +02:00
crud.py Add optional_create flag 2013-10-08 16:46:20 +02:00
errors.py Deprecate HBAC source hosts from CLI 2013-04-12 14:07:55 -04:00
frontend.py frontend: report arguments errors with better detail 2013-10-04 10:25:31 +02:00
krb_utils.py Pylint cleanup. 2013-01-29 15:39:49 +01:00
messages.py Add client capabilities, enable messages 2013-02-21 16:26:09 +01:00
output.py Typo fixes 2012-06-25 21:35:11 -04:00
parameters.py Add IntEnum parameter to ipalib 2013-10-09 18:05:37 +02:00
pkcs10.py Fix assorted bugs found by pylint 2011-01-25 14:01:36 -05:00
plugable.py Allow API plugin registration via a decorator 2013-08-14 12:08:27 +02:00
request.py Remove deprecated i18n code from ipalib/request and all references to it. 2011-03-01 10:31:36 -05:00
rpc.py Fix invalid assumption NSS initialization check in SSLTransport 2013-10-30 11:50:05 +01:00
session.py Compliant client side session cookie behavior 2012-12-10 12:45:09 -05:00
text.py Add ConcatenatedLazyText object 2013-11-21 10:34:25 +01:00
util.py Don't exclude symlinks when loading plugins 2013-09-16 17:35:22 +02:00
x509.py Skip cert issuer validation in service and host commands in CA-less install. 2013-07-09 14:22:57 -04:00