Rob Crittenden 960baaebf4 Don't allow "Modify Group membership" permission to manage admins ...

The permission "Modify Group membership" is used to delegate group
management responsibilities. We don't want that to include managing
the admins group.

https://fedorahosted.org/freeipa/ticket/2416

2012-02-23 11:05:52 +01:00

..

05rfc2247.ldif

Incorporate new schema for IPAv2

2009-02-11 17:13:41 -05:00

60basev2.ldif

schema: Split ipadns definitions from basev2 ones

2011-08-26 08:26:13 -04:00

60basev3.ldif

Add LDAP schema for SSH public keys.

2012-02-13 22:20:18 -05:00

60ipaconfig.ldif

Add SELinux user mapping framework.

2011-12-09 16:46:25 +02:00

60ipadns.ldif

schema: Split ipadns definitions from basev2 ones

2011-08-26 08:26:13 -04:00

60ipasudo.ldif

Rename 60sudo.ldif to 60ipasudo.ldif to not overwrite the 389-ds version.

2010-11-09 13:30:45 -05:00

60kerberos.ldif

Add support for account unlocking

2011-01-28 10:23:02 -05:00

60policyv2.ldif

Re-number some attributes to compress our usage to be contiguous

2010-05-27 10:50:49 -04:00

60samba.ldif

Update samba LDAP schema

2011-09-20 17:27:40 -04:00

anonymous-vlv.ldif

Let anonymous users browse the VLV index

2009-07-10 16:45:45 -04:00

automember.ldif

34 Create FreeIPA CLI Plugin for the 389 Auto Membership plugin

2011-08-31 09:49:43 +02:00

bind.named.conf.template

Let Bind track data changes

2011-08-31 16:46:12 +02:00

bind.zone.db.template

Add new DNS install argument for setting the zone mgr e-mail addr.

2010-09-23 12:00:12 -04:00

bootstrap-template.ldif

Make ipausers a non-posix group on new installs

2012-02-19 19:48:03 -05:00

caJarSigningCert.cfg.template

Add signing profile to CA installation so we can sign the firefox jar file.

2009-05-04 16:54:42 -04:00

certmap.conf.template

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

default-aci.ldif

Add LDAP ACIs for SSH public key schema.

2012-02-13 22:20:23 -05:00

default-hbac.ldif

UUIDs: remove uuid python plugin and let DS always autogenerate

2010-10-28 07:58:31 -04:00

delegation.ldif

Don't allow "Modify Group membership" permission to manage admins

2012-02-23 11:05:52 +01:00

dna.ldif

id ranges: change DNA configuration

2010-11-22 12:42:16 -05:00

dns.ldif

Fix DNS permissions and membership in privileges

2011-10-09 23:44:22 -04:00

ds-nfiles.ldif

Autotune directory server to use a greater number of files

2010-11-22 12:42:16 -05:00

encrypted_attribute.ldif

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

entryusn.ldif

Address entryusn initialization on replica installation

2011-01-28 13:58:43 -05:00

fedora-ds.init.patch

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

host_nis_groups.ldif

Move Managed Entries into their own container in the replicated space.

2011-09-12 16:28:27 -04:00

indices.ldif

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

kdc_extensions.template

Add support for configuring KDC certs for PKINIT

2010-11-18 15:09:36 -05:00

kdc_req.conf.template

Add support for configuring KDC certs for PKINIT

2010-11-18 15:09:36 -05:00

kdc.conf.template

ipa-kdb: Change install to use the new ipa-kdb kdc backend

2011-08-26 08:24:50 -04:00

kerberos.ldif

install: Remove uid=kdc user

2011-08-26 08:24:50 -04:00

key_escrow_schema.ldif

Re-number some attributes to compress our usage to be contiguous

2010-05-27 10:50:49 -04:00

krb5.conf.template

Remove more redundant configuration values from krb5.conf.

2011-10-11 22:00:50 -04:00

krb5.ini.template

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

krb.con.template

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

krbrealm.con.template

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

ldapi.ldif

Enable ldapi connections in the management framework.

2009-08-27 13:36:58 -04:00

Makefile.am

Update S4U2proxy delegation list when creating replicas

2012-02-15 17:24:16 +01:00

managed-entries.ldif

Move Managed Entries into their own container in the replicated space.

2011-09-12 16:28:27 -04:00

master-entry.ldif

Use FQDN in place of FQHN for consistency in sub_dict.

2012-02-15 20:27:34 -05:00

memberof-conf.ldif

Display user and host membership in netgroups.

2010-11-24 08:38:41 -05:00

memberof-task.ldif

Wait for memberof task and DS to start before proceeding in installation.

2011-04-22 11:43:50 +02:00

modrdn-krbprinc.ldif

The precendence on the modrdn plugin was set in the wrong location.

2011-09-13 17:36:59 +02:00

nis.uldif

Remove extraneous trailing single quote in nis.uldif

2011-12-05 22:27:36 -05:00

preferences.html.template

Remove delegation from browser config

2012-02-07 15:51:44 +01:00

referint-conf.ldif

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

replica-acis.ldif

Fix replica setup using replication admin kerberos credentials

2011-03-01 11:02:55 -05:00

replica-automember.ldif

34 Create FreeIPA CLI Plugin for the 389 Auto Membership plugin

2011-08-31 09:49:43 +02:00

replica-s4u2proxy.ldif

Update S4U2proxy delegation list when creating replicas

2012-02-15 17:24:16 +01:00

repoint-managed-entries.ldif

Move Managed Entries into their own container in the replicated space.

2011-09-12 16:28:27 -04:00

root-autobind.ldif

Remove root autobind search restriction, fix upgrade logging & error handling.

2011-06-13 09:51:05 +02:00

schema_compat.uldif

list users from nested groups, too

2011-10-05 09:06:42 +02:00

smb.conf.template

Add ipasam samba passdb backend

2011-12-06 08:29:53 -05:00

sudobind.ldif

Create default disabled sudo bind user

2011-02-23 15:32:24 -05:00

unique-attributes.ldif

Fixed cn attribute in ipaUniqueID uniqueness config.

2011-02-16 19:38:18 -05:00

user_private_groups.ldif

Move Managed Entries into their own container in the replicated space.

2011-09-12 16:28:27 -04:00

uuid-ipauniqueid.ldif

UUIDs: remove uuid python plugin and let DS always autogenerate

2010-10-28 07:58:31 -04:00

wsgi.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00