Rob Crittenden d644d17adf Reduce the number of attributes a host is allowed to write. ...

The list of attributes that a host bound as itself could write was
overly broad.

A host can now only update its description, information about itself
such as OS release, etc, its certificate, password and keytab.

ticket 416

2010-11-30 14:30:52 -05:00

..

05rfc2247.ldif

Incorporate new schema for IPAv2

2009-02-11 17:13:41 -05:00

60basev2.ldif

Remove group nesting from the HBAC service groups

2010-10-28 17:34:34 -04:00

60ipaconfig.ldif

Add Generic config class.

2010-10-05 08:54:07 -04:00

60ipasudo.ldif

Rename 60sudo.ldif to 60ipasudo.ldif to not overwrite the 389-ds version.

2010-11-09 13:30:45 -05:00

60kerberos.ldif

Use kerberos password policy.

2010-11-01 14:15:42 -04:00

60policyv2.ldif

Re-number some attributes to compress our usage to be contiguous

2010-05-27 10:50:49 -04:00

60radius.ldif

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

60samba.ldif

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

anonymous-vlv.ldif

Let anonymous users browse the VLV index

2009-07-10 16:45:45 -04:00

bind.named.conf.template

named.conf: Add trailing dot to the fake_mname

2010-05-06 10:27:21 -04:00

bind.zone.db.template

Add new DNS install argument for setting the zone mgr e-mail addr.

2010-09-23 12:00:12 -04:00

bootstrap-template.ldif

id ranges: change DNA configuration

2010-11-22 12:42:16 -05:00

caJarSigningCert.cfg.template

Add signing profile to CA installation so we can sign the firefox jar file.

2009-05-04 16:54:42 -04:00

certmap.conf.template

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

default-aci.ldif

Reduce the number of attributes a host is allowed to write.

2010-11-30 14:30:52 -05:00

default-hbac.ldif

UUIDs: remove uuid python plugin and let DS always autogenerate

2010-10-28 07:58:31 -04:00

default-keytypes.ldif

pwd-plugin: Always use a special salt by default.

2010-10-28 17:18:03 -04:00

default-pwpolicy.ldif

Use kerberos password policy.

2010-11-01 14:15:42 -04:00

delegation.ldif

Basic changes to get a default principal for DNS

2009-07-10 09:42:22 -04:00

dna.ldif

id ranges: change DNA configuration

2010-11-22 12:42:16 -05:00

dns.ldif

Use the dns plug-in for addition of records during installation

2010-01-21 17:09:18 -05:00

ds-nfiles.ldif

Autotune directory server to use a greater number of files

2010-11-22 12:42:16 -05:00

encrypted_attribute.ldif

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

fedora-ds.init.patch

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

indices.ldif

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

kdc_extensions.template

Add support for configuring KDC certs for PKINIT

2010-11-18 15:09:36 -05:00

kdc_req.conf.template

Add support for configuring KDC certs for PKINIT

2010-11-18 15:09:36 -05:00

kdc.conf.template

Add support for configuring KDC certs for PKINIT

2010-11-18 15:09:36 -05:00

kerberos.ldif

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

key_escrow_schema.ldif

Re-number some attributes to compress our usage to be contiguous

2010-05-27 10:50:49 -04:00

krb5.conf.template

pkinit: always configure pkinit_anchors in krb5.conf

2010-11-18 15:09:40 -05:00

krb5.ini.template

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

krb.con.template

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

krbrealm.con.template

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

ldapi.ldif

Enable ldapi connections in the management framework.

2009-08-27 13:36:58 -04:00

Makefile.am

Autotune directory server to use a greater number of files

2010-11-22 12:42:16 -05:00

master-entry.ldif

id ranges: change DNA configuration

2010-11-22 12:42:16 -05:00

memberof-conf.ldif

Display user and host membership in netgroups.

2010-11-24 08:38:41 -05:00

memberof-task.ldif

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

modrdn-krbprinc.ldif

ipa-modrdn: Enable plugin to handle krbPrincipalName on renames

2010-10-28 07:58:31 -04:00

nis.uldif

add support for hostCategory and userCategory

2010-11-04 14:43:03 -04:00

preferences.html.template

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

referint-conf.ldif

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

schema_compat.uldif

add support for hostCategory and userCategory

2010-11-04 14:43:03 -04:00

unique-attributes.ldif

Set ipaUniqueId to be unwritable and add to uniqueness configuration.

2010-09-20 15:59:53 -04:00

user_private_groups.ldif

Create user private groups with a uniqueid.

2010-11-30 09:52:05 -05:00

uuid-ipauniqueid.ldif

UUIDs: remove uuid python plugin and let DS always autogenerate

2010-10-28 07:58:31 -04:00

wsgi.py

Ensure that Apache is running with MPM=Prefork

2010-11-22 12:35:52 -05:00