freeipa/install/updates/Makefile.am
Fraser Tweedale bc0c606885 Add CA ACL plugin
Implement the caacl commands, which are used to indicate which
principals may be issued certificates from which (sub-)CAs, using
which profiles.

At this commit, and until sub-CAs are implemented, all rules refer
to the top-level CA (represented as ".") and no ca-ref argument is
exposed.

Also, during install and upgrade add a default CA ACL that permits
certificate issuance for all hosts and services using the profile
'caIPAserviceCert' on the top-level CA.

Part of: https://fedorahosted.org/freeipa/ticket/57
Part of: https://fedorahosted.org/freeipa/ticket/4559

Reviewed-By: Martin Basti <mbasti@redhat.com>
2015-06-11 10:50:31 +00:00

64 lines
1.4 KiB
Makefile

NULL =
appdir = $(IPA_DATA_DIR)/updates
app_DATA = \
05-pre_upgrade_plugins.update \
10-config.update \
10-enable-betxn.update \
10-selinuxusermap.update \
10-rootdse.update \
10-uniqueness.update \
10-schema_compat.update \
19-managed-entries.update \
20-aci.update \
20-dna.update \
20-host_nis_groups.update \
20-indices.update \
20-nss_ldap.update \
20-replication.update \
20-sslciphers.update \
20-syncrepl.update \
20-user_private_groups.update \
20-winsync_index.update \
20-uuid.update \
21-replicas_container.update \
21-ca_renewal_container.update \
21-certstore_container.update \
25-referint.update \
30-provisioning.update \
30-s4u2proxy.update \
40-delegation.update \
40-realm_domains.update \
40-replication.update \
40-dns.update \
40-automember.update \
40-certprofile.update \
40-otp.update \
41-caacl.update \
45-roles.update \
50-7_bit_check.update \
50-dogtag10-migration.update \
50-lockout-policy.update \
50-groupuuid.update \
50-hbacservice.update \
50-krbenctypes.update \
50-nis.update \
50-ipaconfig.update \
55-pbacmemberof.update \
59-trusts-sysacount.update \
60-trusts.update \
61-trusts-s4u2proxy.update \
62-ranges.update \
71-idviews.update \
72-domainlevels.update \
90-post_upgrade_plugins.update \
$(NULL)
EXTRA_DIST = \
$(app_DATA) \
$(NULL)
MAINTAINERCLEANFILES = \
*~ \
Makefile.in