Go to file
Pavel Zuna d6d579ead4 Improve filtering of enrollments search results.
This is required for effective filtering of enrollments search
results in the webUI and also gives an edge to the CLI.

After this patch, each LDAPObject can define its relationships
to other LDAPObjects. For now, this is used only for filtering
search results by enrollments, but there are probably more
benefits to come.

You can do this for example:

# search for all users not enrolled in group admins
ipa user-find --not-in-groups=admins

# search for all groups not enrolled in group global with user Pavel
ipa group-find --users=Pavel --not-in-groups=global

# more examples:
ipa group-find --users=Pavel,Jakub --no-users=Honza
ipa hostgroup-find --hosts=webui.pzuna
2011-01-04 21:56:38 -05:00
checks Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
contrib Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
daemons Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
dev This patch removes the existing UI functionality, as a prep for adding the Javascript based ui. 2010-07-29 10:44:56 -04:00
doc/examples Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
install Don't use Class of Service for account activation, use attribute. 2011-01-04 17:09:56 -05:00
ipa-client Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
ipa-radius-admintools Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
ipa-radius-server Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
ipalib Improve filtering of enrollments search results. 2011-01-04 21:56:38 -05:00
ipapython Make ipa-replica-manage list return all known masters 2010-12-21 17:28:13 -05:00
ipaserver Don't use Class of Service for account activation, use attribute. 2011-01-04 17:09:56 -05:00
selinux Grant /usr/sbin/ipa_kpasswd "name_bind" access. 2010-10-22 21:43:00 -04:00
tests SUDO plugin support for external hosts and users https://fedorahosted.org/freeipa/ticket/570 2010-12-21 12:29:46 -05:00
util Use internal implementation of internal Kerberos functions 2010-11-22 16:01:35 -05:00
.bzrignore Added top-level tests/ package that will contain all unit tests 2008-10-07 20:36:44 -06:00
.gitignore Ignore useless stuff by default 2010-10-18 13:25:20 -04:00
autogen.sh build tweaks - use automake's foreign mode, avoid creating empty files to satisfy gnu mode - run autoreconf -f to ensure that everything matches 2010-11-29 11:39:55 -05:00
Contributors.txt Correcting my name in Contributors file. 2010-12-20 10:56:35 -05:00
COPYING Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
ipa Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
ipa.1 Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
ipa.init Introduce ipa control script that reads configuration off ldap 2010-12-10 12:28:38 -05:00
ipa.spec.in sudo and netgroup schema compat updates - fix quoting of netgroup entries - don't bother looking for members of netgroups by looking for entries which list "memberOf: $netgroup" -- the netgroup should list them as "member" values - use newer slapi-nis functionality to produce cn=sudoers - drop the real cn=sudoers container to make room for the compat container 2010-12-21 12:29:33 -05:00
lite-server.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
make-doc This patch removes the existing UI functionality, as a prep for adding the Javascript based ui. 2010-07-29 10:44:56 -04:00
make-test Added Fuzzy docstrings; make-test now runs doctests in tests/*; fixed 'existant' mispelling 2009-12-18 10:56:13 -05:00
Makefile Replication version checking. 2010-06-24 10:33:53 -04:00
MANIFEST.in Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
README Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
setup-client.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
setup.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
TODO Updated TODO based on discussion between Rob, Pavel, and Jason; put TODO in reStructuredText style formatting 2009-05-19 09:55:34 -04:00
VERSION Become IPA v2 beta 1 (2.0.0.pre1) 2010-12-22 14:36:37 -05:00
version.m4.in Mass tree reorganization for IPAv2. To view previous history of files use: 2009-02-03 15:27:14 -05:00

                               IPA Server

  What is it?
  -----------

  For efficiency, compliance and risk mitigation, organizations need to
  centrally manage and correlate vital security information including:

    * Identity (machine, user, virtual machines, groups, authentication
      credentials)
    * Policy (configuration settings, access control information)
    * Audit (events, logs, analysis thereof) 

  Since these are not new problems. there exist many approaches and
  products focused on addressing them. However, these tend to have the
  following weaknesses:

    * Focus on solving identity management across the enterprise has meant
      less focus on policy and audit.
    * Vendor focus on Web identity management problems has meant less well
      developed solutions for central management of the Linux and Unix
      world's vital security info. Organizations are forced to maintain
      a hodgepodge of internal and proprietary solutions at high TCO.
    * Proprietary security products don't easily provide access to the
      vital security information they collect or manage. This makes it
      difficult to synchronize and analyze effectively. 

  The Latest Version
  ------------------

  Details of the latest version can be found on the IPA server project
  page under <http://www.freeipa.org/>.

  Documentation
  -------------

  The most up-to-date documentation can be found at
  <http://freeipa.org/page/Documentation/>.

  Quick Start
  -----------

  To get started quickly, start here:
  <https://fedorahosted.org/freeipa/wiki/QuickStartGuide>

  Licensing
  ---------

  Please see the file called COPYING.

  Contacts
  --------

     * If you want to be informed about new code releases, bug fixes,
       security fixes, general news and information about the IPA server
       subscribe to the freeipa-announce mailing list at
       <https://www.redhat.com/mailman/listinfo/freeipa-interest/>.

     * If you have a bug report please submit it at:
       <https://bugzilla.redhat.com>

     * If you want to participate in actively developing IPA please
       subscribe to the freeipa-devel mailing list at
       <https://www.redhat.com/mailman/listinfo/freeipa-devel/> or join
       us in IRC at irc://irc.freenode.net/freeipa