mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-28 18:01:23 -06:00
7fc4f60c2f
In patch 0001-3, the DNA plugins configuration was changed to scope only 'cn=accounts,SUFFIX' This part of the fix was invalid as trust domain object (that need uid/gid allocation) are under 'cn=trust,SUFFIX'. Revert that part of the fix. Waiting on https://fedorahosted.org/389/ticket/47828, to exclude provisioning contains https://fedorahosted.org/freeipa/ticket/3813 Reviewed-By: Martin Kosek <mkosek@redhat.com>
14 lines
452 B
Plaintext
14 lines
452 B
Plaintext
# Enable the DNA plugin
|
|
dn: cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config
|
|
only:nsslapd-pluginEnabled: on
|
|
|
|
# Change the magic value to -1
|
|
dn: cn=Posix IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config
|
|
only:dnaMagicRegen: -1
|
|
|
|
dn: cn=ipa-winsync,cn=plugins,cn=config
|
|
remove:ipaWinSyncUserAttr: uidNumber 999
|
|
remove:ipaWinSyncUserAttr: gidNumber 999
|
|
add:ipaWinSyncUserAttr: uidNumber -1
|
|
add:ipaWinSyncUserAttr: gidNumber -1
|