IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity
Files
f7753bf55cf713b93f1c12d0fc6dde7f804dd975
freeipa/install/updates
History
Rob Crittenden c08296adff Configure s4u2proxy during installation. 
This creates a new container, cn=s4u2proxy,cn=etc,$SUFFIX

Within that container we control which services are allowed to
delegate tickets for other services. Right now that is limited
from the IPA HTTP to ldap services.

Requires a version of mod_auth_kerb that supports s4u2proxy

https://fedorahosted.org/freeipa/ticket/1098
2012-01-10 22:39:26 -05:00
..
10-60basev2.update
Disallow direct modifications to enrolledBy.
2011-07-14 19:11:49 -04:00
10-config.update
updates: Change default limits on ldap searches
2011-10-12 22:42:03 -04:00
10-RFC2307bis.update
Name update files so they can be easily sorted.
2009-03-25 11:03:07 -04:00
10-RFC4876.update
Fix quoting to work with new csv handler in ldapupdate
2009-05-19 11:50:39 -06:00
10-schema_compat.update
Correct behavior for sudorunasgroup vs sudorunasuser
2011-07-19 08:06:21 -04:00
10-sudo.update
Correct sudo runasuser and runasgroup attributes in schema
2011-07-19 08:06:41 -04:00
19-managed-entries.update
Move Managed Entries into their own container in the replicated space.
2011-09-12 16:28:27 -04:00
20-aci.update
Change the way has_keytab is determined, also check for password.
2011-08-24 14:12:01 +02:00
20-dna.update
Name update files so they can be easily sorted.
2009-03-25 11:03:07 -04:00
20-host_nis_groups.update
Move Managed Entries into their own container in the replicated space.
2011-09-12 16:28:27 -04:00
20-indices.update
Add memberHost and memberUser to default indexes
2011-04-08 11:00:24 -04:00
20-nss_ldap.update
Name update files so they can be easily sorted.
2009-03-25 11:03:07 -04:00
20-replication.update
Name update files so they can be easily sorted.
2009-03-25 11:03:07 -04:00
20-user_private_groups.update
Add plugin framework to LDAP updates.
2011-11-22 23:57:10 -05:00
20-winsync_index.update
Name update files so they can be easily sorted.
2009-03-25 11:03:07 -04:00
21-replicas_container.update
Store list of non-master replicas in DIT and provide way to list them
2011-03-02 09:46:46 -05:00
30-policy.update
Re-number some attributes to compress our usage to be contiguous
2010-05-27 10:50:49 -04:00
30-s4u2proxy.update
Configure s4u2proxy during installation.
2012-01-10 22:39:26 -05:00
40-automember.update
Enable automember for upgraded servers
2011-11-29 09:02:06 +01:00
40-delegation.update
Add SELinux user mapping framework.
2011-12-09 16:46:25 +02:00
40-dns.update
Fix DNS permissions and membership in privileges
2011-10-09 23:44:22 -04:00
45-roles.update
Reorder privileges so that memberof for permissions are generated properly.
2011-12-08 10:08:10 +01:00
50-groupuuid.update
The default groups we create should have ipaUniqueId set
2011-04-15 13:02:17 +02:00
50-hbacservice.update
Add additional pam ftp services to HBAC, and a ftp HBAC service group
2011-08-24 15:21:41 -04:00
50-ipaconfig.update
Add SELinux user mapping framework.
2011-12-09 16:46:25 +02:00
50-lockout-policy.update
Disallow direct modifications to enrolledBy.
2011-07-14 19:11:49 -04:00
50-nis.update
Fix nis netgroup config entry so users appear in netgroup triple.
2011-10-27 09:55:58 +02:00
55-pbacmemberof.update
Reorder privileges so that memberof for permissions are generated properly.
2011-12-08 10:08:10 +01:00
Makefile.am
Configure s4u2proxy during installation.
2012-01-10 22:39:26 -05:00
README
Name update files so they can be easily sorted.
2009-03-25 11:03:07 -04:00

README 

The update files are sorted before being processed because there are
cases where order matters (such as getting schema added first, creating
parent entries, etc).

10 - 20: Schema
20 - 30: FDS Configuration, new indices
30 - 40: Structual elements of the DIT
40 - 50: Pre-loaded data