IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2024-12-28 01:41:14 -06:00
Code Issues Packages Projects Releases Wiki Activity
d228b1bd70
freeipa/ipalib/plugins
History
Alexander Bokovoy d228b1bd70 ipa-kdb: Handle parent-child relationship for subdomains 
When MS-PAC information is re-initialized, record also parent-child
relationship between trust root level domain and its subdomains.

Use parent incoming SID black list to check if child domain is not
allowed to access IPA realm.

We also should really use 'cn' of the entry as domain name.
ipaNTTrustPartner has different meaning on wire, it is an index
pointing to the parent domain of the domain and will be 0 for top
level domains or disjoint subdomains of the trust.

Finally, trustdomain-enable and trustdomain-disable commands should
force MS-PAC cache re-initalization in case of black list change.
Trigger that by asking for cross-realm TGT for HTTP service.
2013-10-04 10:25:31 +02:00
..
__init__.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
aci.py Use LDAP search instead of *group_show to check if a group exists. 2013-07-11 12:39:25 +03:00
automember.py Remove DN normalization from the baseldap plugin. 2013-03-01 16:59:47 +01:00
automount.py Remove unneeded python-ldap imports 2013-03-13 12:36:34 +01:00
baseldap.py Use correct super-calls in get_args() methods 2013-10-02 16:09:07 +02:00
batch.py Add the version option to all Commands 2013-02-21 16:26:09 +01:00
cert.py Remove obsolete self-sign references from man pages, docstrings, comments 2013-04-15 16:56:06 -04:00
config.py Use LDAP search instead of *group_show to check if a group exists. 2013-07-11 12:39:25 +03:00
delegation.py Update plugin docstrings (topic help) to reflect dropped CSV support 2013-02-22 17:20:35 +01:00
dns.py Remove support for IPA deployments with no persistent search 2013-08-09 12:14:42 +02:00
group.py Filter groups by type (POSIX, non-POSIX, external) 2013-04-09 19:00:30 +02:00
hbacrule.py Deprecate HBAC source hosts from CLI 2013-04-12 14:07:55 -04:00
hbacsvc.py ticket 1669 - improve i18n docstring extraction 2011-08-24 23:13:16 -04:00
hbacsvcgroup.py Improve help text for HBAC service groups 2013-04-18 17:29:07 -04:00
hbactest.py ipaserver/dcerpc: attempt to resolve SIDs through SSSD first 2013-07-23 16:24:38 +03:00
host.py Improve help entry for ipa host 2013-08-06 12:31:16 +02:00
hostgroup.py Use LDAP search instead of *group_show to check for a group objectclass. 2013-07-11 12:39:26 +03:00
idrange.py Refactor the interactive prompt logic in idrange_add 2013-07-26 13:57:35 +02:00
internal.py Add base-id, range-size and range-type options to trust-add dialog 2013-08-22 15:23:56 +02:00
kerberos.py Use fully qualified CCACHE names 2013-02-01 08:13:50 +01:00
krbtpolicy.py Use full DNs in plugin code. 2013-03-01 16:59:47 +01:00
migration.py Use valid LDAP search base in migration plugin 2013-07-26 13:42:22 +02:00
misc.py ticket 1669 - improve i18n docstring extraction 2011-08-24 23:13:16 -04:00
netgroup.py Use LDAP search instead of *group_show to check if a group exists. 2013-07-11 12:39:25 +03:00
passwd.py Add the version option to all Commands 2013-02-21 16:26:09 +01:00
permission.py Remove DN normalization from the baseldap plugin. 2013-03-01 16:59:47 +01:00
ping.py Allow API plugin registration via a decorator 2013-08-14 12:08:27 +02:00
pkinit.py Internationalization for public errors 2012-09-03 18:16:12 +02:00
privilege.py Removal of memberofindirect_permissons from privileges 2012-04-09 22:12:39 -04:00
pwpolicy.py Limit pwpolicy maxlife to 20000 days 2013-08-05 17:50:31 +02:00
realmdomains.py Integrate realmdomains with IPA DNS 2013-04-16 15:50:24 +02:00
role.py Only apply validation rules when adding and updating. 2012-02-29 18:00:45 -05:00
selfservice.py Update plugin docstrings (topic help) to reflect dropped CSV support 2013-02-22 17:20:35 +01:00
selinuxusermap.py Use full DNs in plugin code. 2013-03-01 16:59:47 +01:00
service.py Fix service-disable in CA-less install. 2013-08-29 10:18:32 +02:00
sudocmd.py Use full DNs in plugin code. 2013-03-01 16:59:47 +01:00
sudocmdgroup.py Update plugin docstrings (topic help) to reflect dropped CSV support 2013-02-22 17:20:35 +01:00
sudorule.py Fix output for some CLI commands 2013-04-11 15:57:45 +02:00
trust.py ipa-kdb: Handle parent-child relationship for subdomains 2013-10-04 10:25:31 +02:00
user.py Remove word 'field' from GECOS param label 2013-07-23 15:32:13 +02:00
virtual.py Internationalization for public errors 2012-09-03 18:16:12 +02:00
xmlclient.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00