freeipa/install
Jan Cholasta b3411dc985 replica promotion: fix AVC denials in remote connection check
Also move com.redhat.idm.trust-fetch-domains to /usr/libexec/ipa/oddjob.

https://fedorahosted.org/freeipa/ticket/5550

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
2016-02-11 18:40:39 +01:00
..
certmonger Refactor ipautil.run 2015-12-14 10:54:23 +01:00
conf mod_auth_gssapi: Remove ntlmssp support and restrict mechanism to krb5 2015-11-26 15:20:19 +01:00
ffextension webui: append network.negotiate-auth.trusted-uris 2014-09-11 09:41:51 +02:00
html Drop configure.jar 2015-11-13 14:02:45 +01:00
migration Remove unused imports 2015-12-23 07:59:22 +01:00
oddjob replica promotion: fix AVC denials in remote connection check 2016-02-11 18:40:39 +01:00
po Split ipa-client/ into ipaclient/ (Python library) and client/ (C, scripts) 2016-01-27 12:09:02 +01:00
restart_scripts cert renewal: import all external CA certs on IPA CA cert renewal 2016-01-27 14:38:10 +01:00
share Use only AES enctypes by default 2016-01-13 15:24:53 +01:00
tools Automatically detect and remove dangling RUVs 2016-02-02 12:22:37 +01:00
ui Add validation to Issue new certificate dialog 2016-02-02 18:45:38 +01:00
updates Convert ipa-sam to use the new getkeytab control 2016-02-01 13:28:39 +01:00
wsgi Modernize 'except' clauses 2015-08-12 18:17:23 +02:00
configure.ac trusts: add support for one-way trust and switch to it by default 2015-07-08 01:56:52 +02:00
Makefile.am trusts: add support for one-way trust and switch to it by default 2015-07-08 01:56:52 +02:00
README.schema Add some basic rules for adding new schema 2010-08-27 13:40:37 -04:00

Ground rules on adding new schema

Brand new schema, particularly when written specifically for IPA, should be
added in share/*.ldif. Any new files need to be explicitly loaded in
ipaserver/install/dsinstance.py. These simply get copied directly into
the new instance schema directory.

Existing schema (e.g. in an LDAP draft) may either be added as a separate
ldif in share or as an update in the updates directory. The advantage of
adding the schema as an update is if 389-ds ever adds the schema then the
installation won't fail due to existing schema failing to load during
bootstrap.

If the new schema requires a new container then this should be added
to install/bootstrap-template.ldif.