freeipa

mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2026-07-30 08:07:56 -05:00

Files

T

Rob Crittenden 9005b9bc8a Extend ipa-replica-manage to be able to manage DNA ranges.

Attempt to automatically save DNA ranges when a master is removed.
This is done by trying to find a master that does not yet define
a DNA on-deck range. If one can be found then the range on the deleted
master is added.

If one cannot be found then it is reported as an error.

Some validation of the ranges are done to ensure that they do overlap
an IPA local range and do not overlap existing DNA ranges configured
on other masters.

http://freeipa.org/page/V3/Recover_DNA_Ranges

https://fedorahosted.org/freeipa/ticket/3321

2013-03-13 10:32:36 -04:00

10-60basev2.update

Disallow direct modifications to enrolledBy.

2011-07-14 19:11:49 -04:00

10-60basev3.update

Add missing v3 schema on upgrades, fix typo in schema.

2013-02-22 13:30:59 +01:00

10-bind-schema.update

Add safe updates for objectClasses

2012-09-04 22:45:27 -04:00

10-config.update

Support the new Winsync POSIX API.

2012-09-06 14:29:14 +02:00

10-enable-betxn.update

Enable transactions by default, make password and modrdn TXN-aware

2012-11-21 14:55:12 +01:00

10-RFC2307bis.update

Name update files so they can be easily sorted.

2009-03-25 11:03:07 -04:00

10-RFC4876.update

Fix quoting to work with new csv handler in ldapupdate

2009-05-19 11:50:39 -06:00

10-schema_compat.update

Remove disabled entries from sudoers compat tree.

2013-03-06 16:08:20 +01:00

10-selinuxusermap.update

Add per-service option to store the types of PAC it supports

2012-08-01 16:15:51 +02:00

10-ssh.update

Add LDAP schema for SSH public keys.

2012-02-13 22:20:18 -05:00

10-sudo.update

Add support for sudoOrder

2012-03-01 21:02:33 -05:00

10-uniqueness.update

Add uniqueness plugin configuration for sudorule cn

2012-10-08 18:32:41 -04:00

19-managed-entries.update

Move Managed Entries into their own container in the replicated space.

2011-09-12 16:28:27 -04:00

20-aci.update

Add LDAP ACIs for SSH public key schema.

2012-02-13 22:20:23 -05:00

20-dna.update

Change DNA magic value to -1 to make UID 999 usable

2013-03-11 17:07:07 +01:00

20-host_nis_groups.update

Move Managed Entries into their own container in the replicated space.

2011-09-12 16:28:27 -04:00

20-indices.update

Index ipakrbprincipalalias and ipaautomountkey attributes

2012-10-01 22:37:59 -04:00

20-nss_ldap.update

Name update files so they can be easily sorted.

2009-03-25 11:03:07 -04:00

20-replication.update

Don't add another nsDS5ReplicaId on updates if one already exists

2013-02-06 12:22:00 +01:00

20-user_private_groups.update

Add plugin framework to LDAP updates.

2011-11-22 23:57:10 -05:00

20-winsync_index.update

Name update files so they can be easily sorted.

2009-03-25 11:03:07 -04:00

21-ca_renewal_container.update

Use certmonger to renew CA subsystem certificates

2012-07-30 13:39:08 +02:00

21-replicas_container.update

Store list of non-master replicas in DIT and provide way to list them

2011-03-02 09:46:46 -05:00

25-referint.update

Expand Referential Integrity checks

2012-09-16 17:59:27 -04:00

30-policy.update

Re-number some attributes to compress our usage to be contiguous

2010-05-27 10:50:49 -04:00

30-s4u2proxy.update

Add S4U2Proxy delegation permissions on upgrades

2012-02-15 18:00:46 +01:00

40-automember.update

Enable automember for upgraded servers

2011-11-29 09:02:06 +01:00

40-delegation.update

Update sudocmd ACIs to use targetfilter

2013-02-20 17:35:20 +01:00

40-dns.update

Per-domain DNS record permissions

2012-06-28 15:21:21 +02:00

40-realm_domains.update

Add list of domains associated to our realm to cn=etc

2013-02-19 14:15:46 +02:00

40-replication.update

Extend ipa-replica-manage to be able to manage DNA ranges.

2013-03-13 10:32:36 -04:00

45-roles.update

Reorder privileges so that memberof for permissions are generated properly.

2011-12-08 10:08:10 +01:00

50-groupuuid.update

The default groups we create should have ipaUniqueId set

2011-04-15 13:02:17 +02:00

50-hbacservice.update

Add crond as a default HBAC service

2013-01-17 09:50:48 -05:00

50-ipaconfig.update

Set MLS/MCS for user_u context to what will be on remote systems.

2012-11-02 10:17:51 -04:00

50-lockout-policy.update

Disallow direct modifications to enrolledBy.

2011-07-14 19:11:49 -04:00

50-nis.update

- add a pair of ethers maps for computers with hardware addresses on file

2012-04-26 09:00:22 +02:00

55-pbacmemberof.update

Enable transactions by default, make password and modrdn TXN-aware

2012-11-21 14:55:12 +01:00

60-trusts.update

Add NFS specific default for authorization data type

2013-03-08 10:46:00 +01:00

61-trusts-s4u2proxy.update

Add cifs principal to S4U2Proxy targets only when running ipa-adtrust-install

2012-10-09 18:15:01 -04:00

62-ranges.update

Add new ipaIDobject to DNA plugin configuraton

2012-10-04 22:15:36 -04:00

Makefile.am

Add list of domains associated to our realm to cn=etc

2013-02-19 14:15:46 +02:00

README

Name update files so they can be easily sorted.

2009-03-25 11:03:07 -04:00

README

The update files are sorted before being processed because there are
cases where order matters (such as getting schema added first, creating
parent entries, etc).

10 - 20: Schema
20 - 30: FDS Configuration, new indices
30 - 40: Structual elements of the DIT
40 - 50: Pre-loaded data