Alexander Bokovoy fc3834ca46 Resolve external members from trusted domain via Global Catalog ...

A sequence is following:
1. Match external member against existing trusted domain
2. Find trusted domain's domain controller and preferred GC hosts
3. Fetch trusted domain account auth info
4. Set up ccache in /var/run/ipa_memcached/krb5cc_TD<domain> with principal ourdomain$@trusted.domain
5. Do LDAP SASL interactive bind using the ccache
6. Search for the member's SID
7. Decode SID
8. Replace external member name by SID

2012-11-01 15:46:58 -04:00

..

install

Make sure the CA is running when starting services

2012-10-23 22:02:21 -04:00

plugins

Wait for the directory server to come up when updating the agent certificate.

2012-11-01 13:36:52 -04:00

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

dcerpc.py

Resolve external members from trusted domain via Global Catalog

2012-11-01 15:46:58 -04:00

ipaldap.py

Use DN objects instead of strings

2012-08-12 16:23:24 -04:00

rpcserver.py

Internationalization for public errors

2012-09-03 18:16:12 +02:00