freeipa/install/updates
Rob Crittenden f1f1b4e7f2 Enable transactions by default, make password and modrdn TXN-aware
The password and modrdn plugins needed to be made transaction aware
for the pre and post operations.

Remove the reverse member hoop jumping. Just fetch the entry once
and all the memberof data is there (plus objectclass).

Fix some unit tests that are failing because we actually get the data
now due to transactions.

Add small bit of code in user plugin to retrieve the user again
ala wait_for_attr but in the case of transactions we need do it only
once.

Deprecate wait_for_attr code.

Add a memberof fixup task for roles.

https://fedorahosted.org/freeipa/ticket/1263
https://fedorahosted.org/freeipa/ticket/1891
https://fedorahosted.org/freeipa/ticket/2056
https://fedorahosted.org/freeipa/ticket/3043
https://fedorahosted.org/freeipa/ticket/3191
https://fedorahosted.org/freeipa/ticket/3046
2012-11-21 14:55:12 +01:00
..
10-60basev2.update Disallow direct modifications to enrolledBy. 2011-07-14 19:11:49 -04:00
10-60basev3.update Amend memberAllowCmd and memberDenyCmd attribute types 2012-09-16 17:59:12 -04:00
10-bind-schema.update Add safe updates for objectClasses 2012-09-04 22:45:27 -04:00
10-config.update Support the new Winsync POSIX API. 2012-09-06 14:29:14 +02:00
10-enable-betxn.update Enable transactions by default, make password and modrdn TXN-aware 2012-11-21 14:55:12 +01:00
10-RFC2307bis.update Name update files so they can be easily sorted. 2009-03-25 11:03:07 -04:00
10-RFC4876.update Fix quoting to work with new csv handler in ldapupdate 2009-05-19 11:50:39 -06:00
10-schema_compat.update - create a "cn=computers" compat area populated with ieee802Device entries corresponding to computers with fqdn and macAddress attributes 2012-04-26 09:00:17 +02:00
10-selinuxusermap.update Add per-service option to store the types of PAC it supports 2012-08-01 16:15:51 +02:00
10-ssh.update Add LDAP schema for SSH public keys. 2012-02-13 22:20:18 -05:00
10-sudo.update Add support for sudoOrder 2012-03-01 21:02:33 -05:00
10-uniqueness.update Add uniqueness plugin configuration for sudorule cn 2012-10-08 18:32:41 -04:00
19-managed-entries.update Move Managed Entries into their own container in the replicated space. 2011-09-12 16:28:27 -04:00
20-aci.update Add LDAP ACIs for SSH public key schema. 2012-02-13 22:20:23 -05:00
20-dna.update Name update files so they can be easily sorted. 2009-03-25 11:03:07 -04:00
20-host_nis_groups.update Move Managed Entries into their own container in the replicated space. 2011-09-12 16:28:27 -04:00
20-indices.update Index ipakrbprincipalalias and ipaautomountkey attributes 2012-10-01 22:37:59 -04:00
20-nss_ldap.update Name update files so they can be easily sorted. 2009-03-25 11:03:07 -04:00
20-replication.update Name update files so they can be easily sorted. 2009-03-25 11:03:07 -04:00
20-user_private_groups.update Add plugin framework to LDAP updates. 2011-11-22 23:57:10 -05:00
20-winsync_index.update Name update files so they can be easily sorted. 2009-03-25 11:03:07 -04:00
21-ca_renewal_container.update Use certmonger to renew CA subsystem certificates 2012-07-30 13:39:08 +02:00
21-replicas_container.update Store list of non-master replicas in DIT and provide way to list them 2011-03-02 09:46:46 -05:00
25-referint.update Expand Referential Integrity checks 2012-09-16 17:59:27 -04:00
30-policy.update Re-number some attributes to compress our usage to be contiguous 2010-05-27 10:50:49 -04:00
30-s4u2proxy.update Add S4U2Proxy delegation permissions on upgrades 2012-02-15 18:00:46 +01:00
40-automember.update Enable automember for upgraded servers 2011-11-29 09:02:06 +01:00
40-delegation.update Use certmonger to renew CA subsystem certificates 2012-07-30 13:39:08 +02:00
40-dns.update Per-domain DNS record permissions 2012-06-28 15:21:21 +02:00
40-replication.update Run the CLEANALLRUV task when deleting a replication agreement. 2012-09-17 17:48:25 +02:00
45-roles.update Reorder privileges so that memberof for permissions are generated properly. 2011-12-08 10:08:10 +01:00
50-groupuuid.update The default groups we create should have ipaUniqueId set 2011-04-15 13:02:17 +02:00
50-hbacservice.update Add additional pam ftp services to HBAC, and a ftp HBAC service group 2011-08-24 15:21:41 -04:00
50-ipaconfig.update Set MLS/MCS for user_u context to what will be on remote systems. 2012-11-02 10:17:51 -04:00
50-lockout-policy.update Disallow direct modifications to enrolledBy. 2011-07-14 19:11:49 -04:00
50-nis.update - add a pair of ethers maps for computers with hardware addresses on file 2012-04-26 09:00:22 +02:00
55-pbacmemberof.update Enable transactions by default, make password and modrdn TXN-aware 2012-11-21 14:55:12 +01:00
60-trusts.update Add cifs principal to S4U2Proxy targets only when running ipa-adtrust-install 2012-10-09 18:15:01 -04:00
61-trusts-s4u2proxy.update Add cifs principal to S4U2Proxy targets only when running ipa-adtrust-install 2012-10-09 18:15:01 -04:00
62-ranges.update Add new ipaIDobject to DNA plugin configuraton 2012-10-04 22:15:36 -04:00
Makefile.am Enable transactions by default, make password and modrdn TXN-aware 2012-11-21 14:55:12 +01:00
README Name update files so they can be easily sorted. 2009-03-25 11:03:07 -04:00

The update files are sorted before being processed because there are
cases where order matters (such as getting schema added first, creating
parent entries, etc).

10 - 20: Schema
20 - 30: FDS Configuration, new indices
30 - 40: Structual elements of the DIT
40 - 50: Pre-loaded data