mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-28 01:41:14 -06:00
ba59d9d648
This uses a new 389-ds plugin, Managed Entries, to automatically create a group entry when a user is created. The DNA plugin ensures that the group has a gidNumber that matches the users uidNumber. When the user is removed the group is automatically removed as well. If the managed entries plugin is not available or if a specific, separate range for gidNumber is passed in at install time then User-Private Groups will not be configured. The code checking for the Managed Entries plugin may be removed at some point. This is there because this plugin is only available in a 389-ds alpha release currently (1.2.6-a4).
20 lines
559 B
Plaintext
20 lines
559 B
Plaintext
dn: cn=UPG Template,$SUFFIX
|
|
changetype: add
|
|
objectclass: mepTemplateEntry
|
|
cn: UPG Template
|
|
mepRDNAttr: cn
|
|
mepStaticAttr: objectclass: posixGroup
|
|
mepMappedAttr: cn: $$uid
|
|
mepMappedAttr: gidNumber: $$uidNumber
|
|
mepMappedAttr: description: User private group for $$uid
|
|
|
|
dn: cn=UPG Definition,cn=Managed Entries,cn=plugins,cn=config
|
|
changetype: add
|
|
objectclass: extensibleObject
|
|
cn: UPG Definition
|
|
originScope: cn=users,cn=accounts,$SUFFIX
|
|
originFilter: objectclass=posixAccount
|
|
managedBase: cn=groups,cn=accounts,$SUFFIX
|
|
managedTemplate: cn=UPG Template,$SUFFIX
|
|
|