mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-23 07:33:27 -06:00
fbdfd688b9
Due previous changes (in master branch only) the uniqueness plugins
became misconfigured.
After this patch:
* whole $SUFFIX will be checked by unique plugins
* just staged users are exluded from check
This reverts some changes in commit
52b7101c11
Since 389-ds-base 1.3.4.a1 new attribute 'uniqueness-exclude-subtrees'
can be used.
https://fedorahosted.org/freeipa/ticket/4921
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
96 lines
3.2 KiB
Plaintext
96 lines
3.2 KiB
Plaintext
dn: cn=krbPrincipalName uniqueness,cn=plugins,cn=config
|
|
changetype: add
|
|
objectClass: top
|
|
objectClass: nsSlapdPlugin
|
|
objectClass: extensibleObject
|
|
cn: krbPrincipalName uniqueness
|
|
nsslapd-pluginPath: libattr-unique-plugin
|
|
nsslapd-pluginInitfunc: NSUniqueAttr_Init
|
|
nsslapd-pluginType: preoperation
|
|
nsslapd-pluginEnabled: on
|
|
uniqueness-attribute-name: krbPrincipalName
|
|
nsslapd-plugin-depends-on-type: database
|
|
nsslapd-pluginId: NSUniqueAttr
|
|
nsslapd-pluginVersion: 1.1.0
|
|
nsslapd-pluginVendor: Fedora Project
|
|
nsslapd-pluginDescription: Enforce unique attribute values
|
|
uniqueness-subtrees: $SUFFIX
|
|
uniqueness-exclude-subtrees: cn=staged users,cn=accounts,cn=provisioning,$SUFFIX
|
|
uniqueness-across-all-subtrees: on
|
|
|
|
dn: cn=krbCanonicalName uniqueness,cn=plugins,cn=config
|
|
changetype: add
|
|
objectClass: top
|
|
objectClass: nsSlapdPlugin
|
|
objectClass: extensibleObject
|
|
cn: krbCanonicalName uniqueness
|
|
nsslapd-pluginPath: libattr-unique-plugin
|
|
nsslapd-pluginInitfunc: NSUniqueAttr_Init
|
|
nsslapd-pluginType: preoperation
|
|
nsslapd-pluginEnabled: on
|
|
uniqueness-attribute-name: krbCanonicalName
|
|
nsslapd-plugin-depends-on-type: database
|
|
nsslapd-pluginId: NSUniqueAttr
|
|
nsslapd-pluginVersion: 1.1.0
|
|
nsslapd-pluginVendor: Fedora Project
|
|
nsslapd-pluginDescription: Enforce unique attribute values
|
|
uniqueness-subtrees: $SUFFIX
|
|
uniqueness-exclude-subtrees: cn=staged users,cn=accounts,cn=provisioning,$SUFFIX
|
|
uniqueness-across-all-subtrees: on
|
|
|
|
dn: cn=netgroup uniqueness,cn=plugins,cn=config
|
|
changetype: add
|
|
objectClass: top
|
|
objectClass: nsSlapdPlugin
|
|
objectClass: extensibleObject
|
|
cn: netgroup uniqueness
|
|
nsslapd-pluginPath: libattr-unique-plugin
|
|
nsslapd-pluginInitfunc: NSUniqueAttr_Init
|
|
nsslapd-pluginType: preoperation
|
|
nsslapd-pluginEnabled: on
|
|
uniqueness-attribute-name: cn
|
|
uniqueness-subtrees: cn=ng,cn=alt,$SUFFIX
|
|
nsslapd-plugin-depends-on-type: database
|
|
nsslapd-pluginId: NSUniqueAttr
|
|
nsslapd-pluginVersion: 1.1.0
|
|
nsslapd-pluginVendor: Fedora Project
|
|
nsslapd-pluginDescription: Enforce unique attribute values
|
|
|
|
dn: cn=ipaUniqueID uniqueness,cn=plugins,cn=config
|
|
changetype: add
|
|
objectClass: top
|
|
objectClass: nsSlapdPlugin
|
|
objectClass: extensibleObject
|
|
cn: ipaUniqueID uniqueness
|
|
nsslapd-pluginPath: libattr-unique-plugin
|
|
nsslapd-pluginInitfunc: NSUniqueAttr_Init
|
|
nsslapd-pluginType: preoperation
|
|
nsslapd-pluginEnabled: on
|
|
uniqueness-attribute-name: ipaUniqueID
|
|
nsslapd-plugin-depends-on-type: database
|
|
nsslapd-pluginId: NSUniqueAttr
|
|
nsslapd-pluginVersion: 1.1.0
|
|
nsslapd-pluginVendor: Fedora Project
|
|
nsslapd-pluginDescription: Enforce unique attribute values
|
|
uniqueness-subtrees: $SUFFIX
|
|
uniqueness-exclude-subtrees: cn=staged users,cn=accounts,cn=provisioning,$SUFFIX
|
|
uniqueness-across-all-subtrees: on
|
|
|
|
dn: cn=sudorule name uniqueness,cn=plugins,cn=config
|
|
changetype: add
|
|
objectClass: top
|
|
objectClass: nsSlapdPlugin
|
|
objectClass: extensibleObject
|
|
cn: sudorule name uniqueness
|
|
nsslapd-pluginDescription: Enforce unique attribute values
|
|
nsslapd-pluginPath: libattr-unique-plugin
|
|
nsslapd-pluginInitfunc: NSUniqueAttr_Init
|
|
nsslapd-pluginType: preoperation
|
|
nsslapd-pluginEnabled: on
|
|
uniqueness-attribute-name: cn
|
|
uniqueness-subtrees: cn=sudorules,cn=sudo,$SUFFIX
|
|
nsslapd-plugin-depends-on-type: database
|
|
nsslapd-pluginId: NSUniqueAttr
|
|
nsslapd-pluginVersion: 1.1.0
|
|
nsslapd-pluginVendor: Fedora Project
|