mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-01-13 09:41:55 -06:00
8605790225
Provide a way to specify BIND allow-query and allow-transfer ACLs for DNS zones. IMPORTANT: new bind-dyndb-ldap adds a zone transfer ability. To avoid zone information leaks to unintended places, allow-transfer ACL for every zone is by default set to none and has to be explicitly enabled by an Administrator. This is done both for new DNS zones and old DNS zones during RPM update via new DNS upgrade plugin. https://fedorahosted.org/freeipa/ticket/1211 |
||
---|---|---|
.. | ||
platform | ||
py_default_encoding | ||
test | ||
__init__.py | ||
certdb.py | ||
certmonger.py | ||
compat.py | ||
config.py | ||
dnsclient.py | ||
dogtag.py | ||
entity.py | ||
ipa_log_manager.py | ||
ipa.conf | ||
ipautil.py | ||
ipavalidate.py | ||
log_manager.py | ||
Makefile | ||
MANIFEST.in | ||
nsslib.py | ||
README | ||
services.py.in | ||
setup.py.in | ||
sysrestore.py | ||
version.py.in |
This is a set of libraries common to IPA clients and servers though mostly geared currently towards command-line tools. A brief overview: config.py - identify the IPA server domain and realm. It uses dnsclient to try to detect this information first and will fall back to /etc/ipa/default.conf if that fails. dnsclient.py - find IPA information via DNS ipautil.py - helper functions entity.py - entity is the main data type. User and Group extend this class (but don't add anything currently). ipavalidate.py - basic data validation routines