mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-30 10:47:08 -06:00
c9e1ad0dbc
Set the DNAexcludescope on provisioning part of the DIT https://fedorahosted.org/freeipa/ticket/3813 Reviewed-By: David Kupka <dkupka@redhat.com>
15 lines
498 B
Plaintext
15 lines
498 B
Plaintext
# Enable the DNA plugin
|
|
dn: cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config
|
|
only:nsslapd-pluginEnabled: on
|
|
|
|
# Change the magic value to -1
|
|
dn: cn=Posix IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config
|
|
only:dnaMagicRegen: -1
|
|
add: dnaExcludeScope: cn=provisioning,$SUFFIX
|
|
|
|
dn: cn=ipa-winsync,cn=plugins,cn=config
|
|
remove:ipaWinSyncUserAttr: uidNumber 999
|
|
remove:ipaWinSyncUserAttr: gidNumber 999
|
|
add:ipaWinSyncUserAttr: uidNumber -1
|
|
add:ipaWinSyncUserAttr: gidNumber -1
|