Rich Megginson
e3929e60d5
set winsync account disable sync default value to both instead of none
2008-11-13 11:36:37 -05:00
Rich Megginson
5c56c43693
do not store the OUs from the AD DN in the IPA user entry when flattening
2008-10-13 14:09:14 -04:00
Rich Megginson
0988e1c53c
Do not depend on MMR plugin - start before MMR plugin
...
The ipa-winsync plugin needs to start before the MMR plugin, so that it
can register the API functions. Also, the slapi-nis schema compat
plugin creates an entry that looks exactly like the default IPA group
gidNumber entry, so I added an extra (objectclass=groupOfNames) to the
filter since the slapi-nis entry doesn't have that.
2008-10-13 14:09:13 -04:00
Rich Megginson
068ed81195
Do not add enabled user to activated group - clean up parse_acct_disable
...
If a user needs to be enabled, just delete the user from the inactivated group,
but do not add to the activated group. If a user is in no group, the user is
active by default. IPA uses the activated group for override purposes.
parse_acct_disable is only used when the config changes, but I cleaned it
up anyway to make the code clearer.
2008-10-13 14:09:10 -04:00
Rich Megginson
69180c2dcc
Adds winsync account disable and force sync
2008-10-13 14:09:08 -04:00
Rich Megginson
e8bebebc23
fix issues brought up by initial review of ipa winsync enhancements
2008-10-13 14:09:08 -04:00
Rich Megginson
5a5bfa2c70
Added support to IPA server install to install the winsync plugin configuration entry Added support to ipa-replica-manage to add winsync agreements. I mostly used the existing code for setting up replication agreements since replication and winsync are quite similar in their configuration. I just had to add some extra attributes to the sync agreement configuration. The tricky part was importing the Windows CA cert.
2008-10-13 14:09:07 -04:00
Rich Megginson
434f9aca6a
Use dirsrv/file.h with includes by default - only use the other style if we are debugging within the directory server
2008-10-13 14:09:05 -04:00
Rich Megginson
4bc89c427e
fix some memory leaks
2008-10-13 14:09:04 -04:00
Rich Megginson
c80ecc8c2a
Added ipa-winsync-config.c - this handles dynamic configuration via the DSE callbacks, and gets default values from various configuration entries in the IPA tree
2008-10-13 14:09:04 -04:00
Rich Megginson
61b5a95dd1
Added support for posixAccount -lookup attribute containing the homeDirectory prefix and use that to construct the homeDirectory attribute -lookup attribute containing the default gidNumber and use that to add the gidNumber to new users -construct the gecos field from the cn attribute
2008-10-13 14:09:03 -04:00
Rich Megginson
6454956d51
Added the new IPA WinSync Plug-in Work done so far * added the new plugin to makefiles, spec file * added stubs for the api, including begin update, end update, and destroy callbacks * added config code to allow dynamic dse config changes and auto-discovery of realm and new user objectclass list
2008-10-13 14:09:03 -04:00
Rich Megginson
0951496593
Initial addition of ipa-winsync plugin
2008-10-13 14:09:02 -04:00