Martin Kosek 85d16ad7de Add support for AD users to hbactest command ...

How this works:
  1. When a trusted domain user is tested, AD GC is searched
     for the user entry Distinguished Name
  2. The user entry is then read from AD GC and its SID and SIDs
     of all its assigned groups (tokenGroups attribute) are retrieved
  3. The SIDs are then used to search IPA LDAP database to find
     all external groups which have any of these SIDs as external
     members
  4. All these groups having these groups as direct or indirect
     members are added to hbactest allowing it to perform the search

LIMITATIONS:
- only Trusted Admins group members can use this function as it
  uses secret for IPA-Trusted domain link
- List of group SIDs does not contain group memberships outside
  of the trusted domain

https://fedorahosted.org/freeipa/ticket/2997

2013-02-14 08:38:11 +01:00

..

install

Port ipa-replica-prepare to the admintool framework

2013-02-01 13:44:59 -05:00

plugins

Use fully qualified CCACHE names

2013-02-01 08:13:50 +01:00

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

dcerpc.py

Add support for AD users to hbactest command

2013-02-14 08:38:11 +01:00

ipaldap.py

Provide 'protocol' argument to IPAdmin

2012-11-23 12:19:20 +01:00

rpcserver.py

Drop ipapython.compat.

2013-02-01 09:16:06 -05:00