freeipa/install/updates
Alexander Bokovoy f123b01d81 updates: add ACIs for RBCD self-management
Fixes: https://pagure.io/freeipa/issue/9354

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Julien Rische <jrische@redhat.com>
2023-09-11 09:51:51 +02:00
..
05-pre_upgrade_plugins.update Issue 8407 - Support changelog integration into main database 2020-08-04 10:54:57 +03:00
10-config.update Increase default limit on LDAP searches to 100k 2021-09-03 08:59:57 -04:00
10-db-locks.update Fix nsslapd-db-lock tuning of BDB backend 2020-09-24 17:03:00 +02:00
10-enable-betxn.update ds: Support renaming of a replication plugin in 389-ds 2021-06-01 17:09:28 +03:00
10-ipapwd.update
10-rootdse.update
10-selinuxusermap.update
10-uniqueness.update Redesign subid feature 2021-07-09 09:47:30 -04:00
19-managed-entries.update
20-aci.update updates: fix memberManager ACI to allow managers from a specified group 2022-11-28 10:29:03 +01:00
20-autobind.update LDAP autobind authenticateAsDN for BIND named 2021-06-15 14:13:16 +03:00
20-default_password_policy.update Define default password policy for sysaccounts 2020-04-28 11:28:29 +02:00
20-dna.update
20-enable_dirsrv_plugins.update ds: Support renaming of a replication plugin in 389-ds 2021-06-01 17:09:28 +03:00
20-host_nis_groups.update
20-indices.update external-idp: add LDAP schema, indices and other LDAP objects 2022-05-10 15:52:41 +03:00
20-ipaservers_hostgroup.update
20-nss_ldap.update
20-replication.update ds: Support renaming of a replication plugin in 389-ds 2021-06-01 17:09:28 +03:00
20-sslciphers.update
20-syncrepl.update ldap: limit the retro changelog to dns subtree 2017-10-26 12:40:28 +02:00
20-user_private_groups.update
20-uuid.update
20-whoami.update
21-ca_renewal_container.update
21-certstore_container.update
21-replicas_container.update
25-referint.update external-idp: add LDAP schema, indices and other LDAP objects 2022-05-10 15:52:41 +03:00
30-ipservices.update Add index and container for RFC 2307 IP services 2018-12-11 12:16:00 +01:00
30-provisioning.update ACI: grant access to admins group instead of admin user 2018-02-19 15:51:44 +01:00
30-s4u2proxy.update
37-locations.update
40-automember.update
40-certprofile.update
40-delegation.update external-idp: add LDAP schema, indices and other LDAP objects 2022-05-10 15:52:41 +03:00
40-dns.update Allow hosts to read DNS records for IP SAN 2020-03-16 13:04:17 +01:00
40-idp.update external-idp: add LDAP schema, indices and other LDAP objects 2022-05-10 15:52:41 +03:00
40-otp.update
40-realm_domains.update
40-replication.update Update ACIs with the correct syntax 2020-05-04 20:49:23 +02:00
40-vault.update
41-caacl.update
41-lightweight-cas.update
45-roles.update
49-autobind-services.update LDAP autobind authenticateAsDN for BIND named 2021-06-15 14:13:16 +03:00
50-7_bit_check.update
50-dogtag10-migration.update Clean up the PKI securitydomain when removing a server 2021-08-16 09:12:55 +02:00
50-groupuuid.update
50-hbacservice.update
50-ipaconfig.update Fix test_webui.test_selinuxusermap 2019-07-15 14:41:23 +03:00
50-krbenctypes.update Block camellia in krbenctypes update in FIPS 2019-11-05 11:48:28 -05:00
50-nis.update
55-pbacmemberof.update
59-trusts-sysacount.update
60-trusts.update ipasam: implement PASSDB getgrnam call 2021-01-22 12:21:33 -05:00
61-trusts-s4u2proxy.update
62-ranges.update
71-idviews-sasl-mapping.update
71-idviews.update
72-domainlevels.update
73-certmap.update
73-custodia.update
73-passkey.update passkeyconfig: require-user-verification is a boolean 2023-06-01 08:20:37 +02:00
73-service-rbcd.update updates: add ACIs for RBCD self-management 2023-09-11 09:51:51 +02:00
73-subid.update Fix typo in "Subordinate ID Selfservice User" role 2023-08-21 10:41:57 +02:00
73-winsync.update
75-user-trust-attributes.update Add SMB attributes for users 2019-07-01 13:21:21 +02:00
80-schema_compat.update
81-externalmembers.update install/updates: move external members past schema compat update 2020-02-12 11:45:39 +01:00
90-post_upgrade_plugins.update Generate CNAMEs for TXT+URI location krb records 2022-11-23 20:00:17 +01:00
Makefile.am updates: add ACIs for RBCD self-management 2023-09-11 09:51:51 +02:00
README

The update files are sorted before being processed because there are
cases where order matters (such as getting schema added first, creating
parent entries, etc).

Updates are applied in blocks of ten so that any entries that are dependant
on another can be added successfully without having to rely on the length
of the DN to get the sorting correct.

The file names should use the format #-<description>.update where # conforms
to this:

10 - 19: Configuration
20 - 29: 389-ds configuration, new indices
30 - 39: Structual elements of the DIT
40 - 49: Pre-loaded data
50 - 59: Cleanup existing data
60 - 69: AD Trust
70 - 79: Reserved
80 - 89: Reserved

These numbers aren't absolute, there may be reasons to put an update
into one place or another, but by adhereing to the scheme it will be
easier to find existing updates and know where to put new ones.