public/freeipa
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5,873 Commits 9 Branches 0 Tags
74b6099fb058564a74b91b701c07532ed0f4cefc
Commit Graph
12 Commits
Author SHA1 Message Date
Tomas Babej 04a17f00b7 Enforce exact SID match when adding or modifying a ID range 
SID validation in idrange.py now enforces exact match on SIDs, thus
one can no longer use SID of an object in a trusted domain as a
trusted domain SID.

https://fedorahosted.org/freeipa/ticket/3432
 2013-03-14 15:20:30 +01:00
Tomas Babej 68ffb4af2f Add trusted domain range objectclass when using idrange-mod 
When modifing the idrange, one was able to add ipa NT trusted
AD domain sid without objectclass ipatrustedaddomainrange being
added. This patch fixes the issue.
 2013-02-26 09:32:30 +01:00
Tomas Babej 4ba2700de4 Make options checks in idrange-add/mod consistent 
Both now enforce the following checks:
  - dom_sid and secondary_rid_base cannot be used together
  - rid_base must be used together if dom_rid is set
  - secondary_rid_base and rid_base must be used together
    if dom_rid is not set

Unit test for third check has been added.

http://fedorahosted.org/freeipa/ticket/3170
 2013-02-26 09:32:30 +01:00
Tomas Babej 559a87017a Add option to specify SID using domain name to idrange-add/mod 
When adding/modifying an ID range for a trusted domain, the newly
added option --dom-name can be used. This looks up SID of the
trusted domain in LDAP and therefore the user is not required
to write it down in CLI. If the lookup fails, error message
asking the user to specify the SID manually is shown.

https://fedorahosted.org/freeipa/ticket/3133
 2013-02-18 16:37:07 +01:00
Tomas Babej 389854756b Forbid overlapping rid ranges for the same id range 
Creating an id range with overlapping primary and secondary
rid range using idrange-add or idrange-mod command now
raises ValidationError. Unit tests have been added to
test_range_plugin.py.

https://fedorahosted.org/freeipa/ticket/3171
 2012-12-17 15:29:35 +01:00
Alexander Bokovoy 21d893ddde Warn about DNA plugin configuration when working with local ID ranges 
https://fedorahosted.org/freeipa/ticket/3116
 2012-10-17 12:08:15 +02:00
Alexander Bokovoy 87a37c8e2f validate SID for trusted domain when adding/modifying ID range 
https://fedorahosted.org/freeipa/ticket/3087
 2012-09-20 14:55:34 +02:00
Martin Kosek 459016d12b Fix idrange plugin help 
range plugin was renamed to idrange. Update plugin help to reflect
this change.
 2012-09-20 10:36:13 +02:00
Yuri Chornoivan 8bbb42b410 Fix various typos. 
https://fedorahosted.org/freeipa/ticket/3089
 2012-09-18 08:45:28 +02:00
Sumit Bose fe083fd5bf IDRange CLI: Add documentation 
Fixes https://fedorahosted.org/freeipa/ticket/2969
 2012-09-07 16:50:35 +02:00
Sumit Bose 67b47a65f2 IDRange CLI: allow to work without arguments 
Fixes https://fedorahosted.org/freeipa/ticket/2999
 2012-09-07 16:50:35 +02:00
Sumit Bose 377e1267b7 Rename range CLI to idrange 2012-09-07 16:50:35 +02:00