IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity
c08296adff
freeipa/install/updates
History
Rob Crittenden c08296adff Configure s4u2proxy during installation. 
This creates a new container, cn=s4u2proxy,cn=etc,$SUFFIX

Within that container we control which services are allowed to
delegate tickets for other services. Right now that is limited
from the IPA HTTP to ldap services.

Requires a version of mod_auth_kerb that supports s4u2proxy

https://fedorahosted.org/freeipa/ticket/1098
2012-01-10 22:39:26 -05:00
..
10-60basev2.update Disallow direct modifications to enrolledBy. 2011-07-14 19:11:49 -04:00
10-config.update updates: Change default limits on ldap searches 2011-10-12 22:42:03 -04:00
10-RFC2307bis.update Name update files so they can be easily sorted. 2009-03-25 11:03:07 -04:00
10-RFC4876.update Fix quoting to work with new csv handler in ldapupdate 2009-05-19 11:50:39 -06:00
10-schema_compat.update Correct behavior for sudorunasgroup vs sudorunasuser 2011-07-19 08:06:21 -04:00
10-sudo.update Correct sudo runasuser and runasgroup attributes in schema 2011-07-19 08:06:41 -04:00
19-managed-entries.update Move Managed Entries into their own container in the replicated space. 2011-09-12 16:28:27 -04:00
20-aci.update Change the way has_keytab is determined, also check for password. 2011-08-24 14:12:01 +02:00
20-dna.update Name update files so they can be easily sorted. 2009-03-25 11:03:07 -04:00
20-host_nis_groups.update Move Managed Entries into their own container in the replicated space. 2011-09-12 16:28:27 -04:00
20-indices.update Add memberHost and memberUser to default indexes 2011-04-08 11:00:24 -04:00
20-nss_ldap.update Name update files so they can be easily sorted. 2009-03-25 11:03:07 -04:00
20-replication.update Name update files so they can be easily sorted. 2009-03-25 11:03:07 -04:00
20-user_private_groups.update Add plugin framework to LDAP updates. 2011-11-22 23:57:10 -05:00
20-winsync_index.update Name update files so they can be easily sorted. 2009-03-25 11:03:07 -04:00
21-replicas_container.update Store list of non-master replicas in DIT and provide way to list them 2011-03-02 09:46:46 -05:00
30-policy.update Re-number some attributes to compress our usage to be contiguous 2010-05-27 10:50:49 -04:00
30-s4u2proxy.update Configure s4u2proxy during installation. 2012-01-10 22:39:26 -05:00
40-automember.update Enable automember for upgraded servers 2011-11-29 09:02:06 +01:00
40-delegation.update Add SELinux user mapping framework. 2011-12-09 16:46:25 +02:00
40-dns.update Fix DNS permissions and membership in privileges 2011-10-09 23:44:22 -04:00
45-roles.update Reorder privileges so that memberof for permissions are generated properly. 2011-12-08 10:08:10 +01:00
50-groupuuid.update The default groups we create should have ipaUniqueId set 2011-04-15 13:02:17 +02:00
50-hbacservice.update Add additional pam ftp services to HBAC, and a ftp HBAC service group 2011-08-24 15:21:41 -04:00
50-ipaconfig.update Add SELinux user mapping framework. 2011-12-09 16:46:25 +02:00
50-lockout-policy.update Disallow direct modifications to enrolledBy. 2011-07-14 19:11:49 -04:00
50-nis.update Fix nis netgroup config entry so users appear in netgroup triple. 2011-10-27 09:55:58 +02:00
55-pbacmemberof.update Reorder privileges so that memberof for permissions are generated properly. 2011-12-08 10:08:10 +01:00
Makefile.am Configure s4u2proxy during installation. 2012-01-10 22:39:26 -05:00
README Name update files so they can be easily sorted. 2009-03-25 11:03:07 -04:00

README 

The update files are sorted before being processed because there are
cases where order matters (such as getting schema added first, creating
parent entries, etc).

10 - 20: Schema
20 - 30: FDS Configuration, new indices
30 - 40: Structual elements of the DIT
40 - 50: Pre-loaded data