mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-02-25 18:55:28 -06:00
c19911845d
This creates a new role, replicaadmin, so a non-DM user can do limited management of replication agreements. Note that with cn=config if an unauthorized user performs a search an error is not returned, no entries are returned. This makes it difficult to determine if there are simply no replication agreements or we aren't allowed to see them. Once the ipaldap.py module gets replaced by ldap2 we can use Get Effective Rights to easily tell the difference.
The update files are sorted before being processed because there are cases where order matters (such as getting schema added first, creating parent entries, etc). 10 - 20: Schema 20 - 30: FDS Configuration, new indices 30 - 40: Structual elements of the DIT 40 - 50: Pre-loaded data