freeipa/ipaserver/plugins
Alexander Bokovoy 905db92e61 adtrust: optimize forest root LDAP filter
`ipa trust-find' command should only show trusted forest root domains

The child domains should be visible via

   ipa trustdomain-find forest.root

The difference between forest root (or external domain) and child
domains is that root domain gets ipaIDObject class to allow assigning a
POSIX ID to the object. This POSIX ID is used by Samba when an Active
Directory domain controller connects as forest trusted domain object.

Child domains can only talk to IPA via forest root domain, thus they
don't need POSIX ID for their TDOs. This allows us a way to
differentiate objects for the purpose of 'trust-find' /
'trustdomain-find' commands.

Fixes https://fedorahosted.org/freeipa/ticket/5942

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
2016-06-15 10:02:33 +02:00
..
__init__.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
aci.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
automember.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
automount.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
baseldap.py Removed dead code from LDAP{Remove,Add}ReverseMember 2016-06-06 18:26:14 +02:00
baseuser.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
batch.py batch command can be used to trigger internal errors on server 2016-06-14 09:26:15 +02:00
ca.py Add 'ca' plugin 2016-06-15 07:13:38 +02:00
caacl.py Update 'caacl' plugin to support lightweight CAs 2016-06-15 07:13:38 +02:00
cert.py Add issuer options to cert-show and cert-find 2016-06-15 07:13:38 +02:00
certprofile.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
config.py Server Roles: provide an API for setting CA renewal master 2016-06-13 17:50:54 +02:00
delegation.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
dns.py Server Roles: make *config-show consume relevant roles/attributes 2016-06-13 17:50:54 +02:00
dogtag.py Add issuer options to cert-show and cert-find 2016-06-15 07:13:38 +02:00
domainlevel.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
group.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
hbac.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
hbacrule.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
hbacsvc.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
hbacsvcgroup.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
hbactest.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
host.py Remove service and host cert issuer validation 2016-06-06 08:58:01 +02:00
hostgroup.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
idrange.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
idviews.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
internal.py Extend caacl entity 2016-06-15 09:59:50 +02:00
join.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
krbtpolicy.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
ldap2.py ipalib, ipaserver: migrate all plugins to Registry-based registration 2016-05-25 16:06:26 +02:00
location.py DNS Locations: when removing location remove it from servers first 2016-06-03 15:58:21 +02:00
migration.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
misc.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
netgroup.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
otp.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
otpconfig.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
otptoken.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
passwd.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
permission.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
ping.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
pkinit.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
privilege.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
pwpolicy.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
rabase.py Add CA argument to ra.request_certificate 2016-06-15 07:13:38 +02:00
radiusproxy.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
realmdomains.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
role.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
schema.py schema: fix topic command output 2016-06-09 09:11:28 +02:00
selfservice.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
selinuxusermap.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
server.py Server Roles: make server-{show,find} utilize role information 2016-06-13 17:50:54 +02:00
serverrole.py Server Roles: public API for server roles 2016-06-13 17:50:54 +02:00
serverroles.py Server Roles: Backend plugin to query roles and attributes 2016-06-13 17:50:54 +02:00
service.py replica install: use remote server API to create service entries 2016-06-09 09:11:28 +02:00
servicedelegation.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
session.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
stageuser.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
sudo.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
sudocmd.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
sudocmdgroup.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
sudorule.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
topology.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
trust.py adtrust: optimize forest root LDAP filter 2016-06-15 10:02:33 +02:00
user.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
vault.py Server Roles: make *config-show consume relevant roles/attributes 2016-06-13 17:50:54 +02:00
virtual.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
xmlserver.py ipalib, ipaserver: migrate all plugins to Registry-based registration 2016-05-25 16:06:26 +02:00