mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-23 15:40:01 -06:00
e31d5fb1cf
There are some operations, like those for the certificate system, that don't need to write to the directory server. So instead we have an entry that we test against to determine whether the operation is allowed or not. This is done by attempting a write on the entry. If it would succeed then permission is granted. If not then denied. The write we attempt is actually invalid so the write itself will fail but the attempt will fail first if access is not permitted, so we can distinguish between the two without polluting the entry. |
||
|---|---|---|
| .. | ||
| 10-RFC2307bis.update | ||
| 10-RFC4876.update | ||
| 20-dna.update | ||
| 20-indices.update | ||
| 20-nss_ldap.update | ||
| 20-replication.update | ||
| 20-winsync_index.update | ||
| 30-automount.update | ||
| 30-groupofhosts.update | ||
| 30-netgroups.update | ||
| 30-policy.update | ||
| 30-rolegroup.update | ||
| 30-taskgroup.update | ||
| 40-delegation.update | ||
| Makefile.am | ||
| README | ||
The update files are sorted before being processed because there are cases where order matters (such as getting schema added first, creating parent entries, etc). 10 - 20: Schema 20 - 30: FDS Configuration, new indices 30 - 40: Structual elements of the DIT 40 - 50: Pre-loaded data