freeipa/install
Tomas Babej 9304b649a3 sudorule: Allow using external groups as groups of runAsUsers
Adds a new attribute ipaSudoRunAsExtUserGroup and corresponding hooks
sudorule plugin.

https://fedorahosted.org/freeipa/ticket/4263

Reviewed-By: Petr Viktorin <pviktori@redhat.com>
2014-06-25 20:14:49 +02:00
..
certmonger Support exporting CSRs in dogtag-ipa-ca-renew-agent. 2014-03-25 16:54:56 +01:00
conf Use certmonger D-Bus API to configure certmonger in CA install. 2014-03-25 16:54:54 +01:00
ffextension Kerberos authentication extension makefiles 2012-10-04 18:07:34 -04:00
html webui: remove remnants of jquery-ui 2014-06-10 10:23:22 +02:00
migration ipaplatform: Move all filesystem paths to ipaplatform.paths module 2014-06-16 19:48:20 +02:00
po fix typo in ipa -v migrate-ds 2014-03-21 13:08:03 +01:00
restart_scripts ipaplatform: Remove redundant imports of ipaservices 2014-06-16 19:48:20 +02:00
share sudorule: Allow using external groups as groups of runAsUsers 2014-06-25 20:14:49 +02:00
tools Implement OTP token importing 2014-06-25 12:55:02 +02:00
ui webui: don't limit permission search in privileges 2014-06-25 16:23:14 +02:00
updates sudorule: Allow using external groups as groups of runAsUsers 2014-06-25 20:14:49 +02:00
wsgi ipaplatform: Move all filesystem paths to ipaplatform.paths module 2014-06-16 19:48:20 +02:00
configure.ac RCUE initial commit 2014-01-21 12:04:02 +01:00
Makefile.am Change group ownership of CRL publish directory 2013-07-16 12:17:40 +02:00
README.schema Add some basic rules for adding new schema 2010-08-27 13:40:37 -04:00

Ground rules on adding new schema

Brand new schema, particularly when written specifically for IPA, should be
added in share/*.ldif. Any new files need to be explicitly loaded in
ipaserver/install/dsinstance.py. These simply get copied directly into
the new instance schema directory.

Existing schema (e.g. in an LDAP draft) may either be added as a separate
ldif in share or as an update in the updates directory. The advantage of
adding the schema as an update is if 389-ds ever adds the schema then the
installation won't fail due to existing schema failing to load during
bootstrap.

If the new schema requires a new container then this should be added
to install/bootstrap-template.ldif.