Martin Kosek c0630950a1 Expand Referential Integrity checks ... Many attributes in IPA (e.g. manager, memberuser, managedby, ...) are used to store DNs of linked objects in IPA (users, hosts, sudo commands, etc.). However, when the linked objects is deleted or renamed, the attribute pointing to it stays with the objects and thus may create a dangling link causing issues in client software reading the data. Directory Server has a plugin to enforce referential integrity (RI) by checking DEL and MODRDN operations and updating affected links. It was already used for manager and secretary attributes and should be expanded for the missing attributes to avoid dangling links. As a prerequisite, all attributes checked for RI must have pres and eq indexes to avoid performance issues. Thus, the following indexes are added: * manager (pres index only) * secretary (pres index only) * memberHost * memberUser * sourcehost * memberservice * managedby * memberallowcmd * memberdenycmd * ipasudorunas * ipasudorunasgroup Referential Integrity plugin is updated to enforce RI for all these attributes. Unit tests covering RI checks for all these attributes were added as well. Note: this update will only fix RI on one master as RI plugin does not check replicated operations. https://fedorahosted.org/freeipa/ticket/2866		2012-09-16 17:59:27 -04:00
..
__init__.py	Change FreeIPA license to GPLv3+	2010-12-20 17:19:53 -05:00
objectclasses.py	Add support for external group members	2012-06-28 16:53:33 +02:00
test_attr.py	Fix addattr internal error	2012-09-16 17:52:56 -04:00
test_automember_plugin.py	Set the e-mail attribute using the default domain name by default	2012-09-07 13:36:37 +02:00
test_automount_plugin.py	Use DN objects instead of strings	2012-08-12 16:23:24 -04:00
test_baseldap_plugin.py	Rework the CallbackInterface	2012-06-14 11:09:43 +02:00
test_batch_plugin.py	Use DN objects instead of strings	2012-08-12 16:23:24 -04:00
test_cert.py	Use DN objects instead of strings	2012-08-12 16:23:24 -04:00
test_config_plugin.py	Fix validator for SELinux user map settings in config plugin.	2012-07-26 23:57:25 -04:00
test_delegation_plugin.py	Use DN objects instead of strings	2012-08-12 16:23:24 -04:00
test_dns_plugin.py	Update DNS zone allow-query validation test	2012-09-07 13:50:54 +02:00
test_group_plugin.py	Set the e-mail attribute using the default domain name by default	2012-09-07 13:36:37 +02:00
test_hbac_plugin.py	Expand Referential Integrity checks	2012-09-16 17:59:27 -04:00
test_hbacsvcgroup_plugin.py	Use DN objects instead of strings	2012-08-12 16:23:24 -04:00
test_hbactest_plugin.py	Use valid argument names in tests	2012-03-25 18:05:33 -04:00
test_host_plugin.py	Expand Referential Integrity checks	2012-09-16 17:59:27 -04:00
test_hostgroup_plugin.py	Use DN objects instead of strings	2012-08-12 16:23:24 -04:00
test_krbtpolicy.py	Set the e-mail attribute using the default domain name by default	2012-09-07 13:36:37 +02:00
test_nesting.py	Set the e-mail attribute using the default domain name by default	2012-09-07 13:36:37 +02:00
test_netgroup_plugin.py	Set the e-mail attribute using the default domain name by default	2012-09-07 13:36:37 +02:00
test_passwd_plugin.py	Use nose tools to check for exceptions	2012-03-19 16:33:35 +01:00
test_permission_plugin.py	Fixes different behaviour of permission-mod and show.	2012-08-29 16:02:43 -04:00
test_ping_plugin.py	Fail on unknown Command options	2012-06-20 15:18:42 +02:00
test_privilege_plugin.py	Use DN objects instead of strings	2012-08-12 16:23:24 -04:00
test_pwpolicy_plugin.py	Sort policies numerically in pwpolicy-find	2012-09-03 21:47:21 -04:00
test_range_plugin.py	Rename range CLI to idrange	2012-09-07 16:50:35 +02:00
test_replace.py	Use DN objects instead of strings	2012-08-12 16:23:24 -04:00
test_role_plugin.py	Use DN objects instead of strings	2012-08-12 16:23:24 -04:00
test_selfservice_plugin.py	Do not use extra command options in ACI, permission, selfservice	2012-05-14 10:38:07 +02:00
test_selinuxusermap_plugin.py	Make sure selinuxusemap behaves consistently to HBAC rule	2012-09-12 16:13:17 +02:00
test_service_plugin.py	Internationalization for public errors	2012-09-03 18:16:12 +02:00
test_sudocmd_plugin.py	Use DN objects instead of strings	2012-08-12 16:23:24 -04:00
test_sudocmdgroup_plugin.py	Use DN objects instead of strings	2012-08-12 16:23:24 -04:00
test_sudorule_plugin.py	Expand Referential Integrity checks	2012-09-16 17:59:27 -04:00
test_user_plugin.py	Expand Referential Integrity checks	2012-09-16 17:59:27 -04:00
xmlrpc_test.py	Use DN objects instead of strings	2012-08-12 16:23:24 -04:00