mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-23 07:33:27 -06:00
2f4b3972a0
There are two reasons for the plugin framework: 1. To provide a way of doing manual/complex LDAP changes without having to keep extending ldapupdate.py (like we did with managed entries). 2. Allows for better control of restarts. There are two types of plugins, preop and postop. A preop plugin runs before any file-based updates are loaded. A postop plugin runs after all file-based updates are applied. A preop plugin may update LDAP directly or craft update entries to be applied with the file-based updates. Either a preop or postop plugin may attempt to restart the dirsrv instance. The instance is only restartable if ipa-ldap-updater is being executed as root. A warning is printed if a restart is requested for a non-root user. Plugins are not executed by default. This is so we can use ldapupdate to apply simple updates in commands like ipa-nis-manage. https://fedorahosted.org/freeipa/ticket/1789 https://fedorahosted.org/freeipa/ticket/1790 https://fedorahosted.org/freeipa/ticket/2032
27 lines
1.1 KiB
Plaintext
27 lines
1.1 KiB
Plaintext
# This is a copy of the definition from user_private_groups.ldif
|
|
# This is required for replication. The template entry will get
|
|
# replicated but the plugin configuration will not.
|
|
|
|
dn: cn=UPG Template,cn=Templates,cn=Managed Entries,cn=etc,$SUFFIX
|
|
default:objectclass: mepTemplateEntry
|
|
default:cn: UPG Template
|
|
default:mepRDNAttr: cn
|
|
default:mepStaticAttr: objectclass: posixgroup
|
|
default:mepStaticAttr: objectclass: ipaobject
|
|
default:mepStaticAttr: ipaUniqueId: autogenerate
|
|
default:mepMappedAttr: cn: $$uid
|
|
default:mepMappedAttr: gidNumber: $$uidNumber
|
|
default:mepMappedAttr: description: User private group for $$uid
|
|
|
|
|
|
dn: cn=UPG Definition,cn=Definitions,cn=Managed Entries,cn=etc,$SUFFIX
|
|
default:objectclass: extensibleObject
|
|
default:cn: UPG Definition
|
|
default:originScope: cn=users,cn=accounts,$SUFFIX
|
|
default:originFilter: objectclass=posixAccount
|
|
default:managedBase: cn=groups,cn=accounts,$SUFFIX
|
|
default:managedTemplate: cn=UPG Template,cn=Templates,cn=Managed Entries,cn=etc,$SUFFIX
|
|
|
|
dn: cn=UPG Definition,cn=Definitions,cn=Managed Entries,cn=etc,$SUFFIX
|
|
replace:originFilter: objectclass=posixAccount::(&(objectclass=posixAccount)(!(description=__no_upg__)))
|