mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2026-10-25 22:50:12 -05:00
Alexander Bokovoy
cc763d78cc
When full 32-bit ID range usage is required, subordinate ID support have to be disabled. However, even if ID range for subordinate IDs were to be removed, it will be restored during the next data upgrade. Change upgrade code to only apply subID range creation when subID support is enabled. Do not allow allocating subIDs if their use is disabled. Allow full 32-bit uidNumber/gidNumber values in JSON payload. Fixes: https://pagure.io/freeipa/issue/9757 Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com> Reviewed-By: Rob Crittenden <rcritten@redhat.com> Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>
2.0 KiB
2.0 KiB
config_mod
Modify configuration options.
Arguments
No arguments.
Options
- rights : :ref:
Flag<Flag>(Required) - Default: False
- all : :ref:
Flag<Flag>(Required) - Default: False
- raw : :ref:
Flag<Flag>(Required) - Default: False
- ipamaxusernamelength : :ref:
Int<Int> - ipamaxhostnamelength : :ref:
Int<Int> - ipahomesrootdir : :ref:
IA5Str<IA5Str> - ipadefaultloginshell : :ref:
Str<Str> - ipadefaultprimarygroup : :ref:
Str<Str> - ipadefaultemaildomain : :ref:
Str<Str> - ipasearchtimelimit : :ref:
Int<Int> - ipasearchrecordslimit : :ref:
Int<Int> - ipausersearchfields : :ref:
IA5Str<IA5Str> - ipagroupsearchfields : :ref:
IA5Str<IA5Str> - ipamigrationenabled : :ref:
Bool<Bool> - ipagroupobjectclasses : :ref:
Str<Str> - ipauserobjectclasses : :ref:
Str<Str> - ipapwdexpadvnotify : :ref:
Int<Int> - ipaconfigstring : :ref:
StrEnum<StrEnum> - Values: ('AllowNThash', 'KDC:Disable Last Success', 'KDC:Disable Lockout', 'KDC:Disable Default Preauth for SPNs', 'EnforceLDAPOTP', 'SubID:Disable')
- ipaselinuxusermaporder : :ref:
Str<Str> - ipaselinuxusermapdefault : :ref:
Str<Str> - ipakrbauthzdata : :ref:
StrEnum<StrEnum> - Values: ('MS-PAC', 'PAD', 'nfs:NONE')
- ipauserauthtype : :ref:
StrEnum<StrEnum> - Values: ('password', 'radius', 'otp', 'pkinit', 'hardened', 'idp', 'passkey', 'disabled')
- ipauserdefaultsubordinateid : :ref:
Bool<Bool> - ca_renewal_master_server : :ref:
Str<Str> - ipadomainresolutionorder : :ref:
Str<Str> - enable_sid : :ref:
Flag<Flag> - Default: False
- add_sids : :ref:
Flag<Flag> - Default: False
- netbios_name : :ref:
Str<Str> - setattr : :ref:
Str<Str> - addattr : :ref:
Str<Str> - delattr : :ref:
Str<Str> - version : :ref:
Str<Str>
Output
| Name | Type |
|---|---|
| result | Entry |
| summary | Output |
| value | PrimaryKey |