Christian Heimes
1c4ae37293
New LDAP object class "ipaUserSubordinate" with four new fields: - ipasubuidnumber / ipasubuidcount - ipasubgidnumber / ipasgbuidcount New self-service permission to add subids. New command user-auto-subid to auto-assign subid The code hard-codes counts to 65536, sets subgid equal to subuid, and does not allow removal of subids. There is also a hack that emulates a DNA plugin with step interval 65536 for testing. Work around problem with older SSSD clients that fail with unknown idrange type "ipa-local-subid", see: https://github.com/SSSD/sssd/issues/5571 Related: https://pagure.io/freeipa/issue/8361 Signed-off-by: Christian Heimes <cheimes@redhat.com> Reviewed-By: Francois Cami <fcami@redhat.com> Reviewed-By: Rob Crittenden <rcritten@redhat.com>
23 lines
577 B
ReStructuredText
23 lines
577 B
ReStructuredText
FreeIPA design documentation
|
|
============================
|
|
|
|
.. toctree::
|
|
:maxdepth: 1
|
|
|
|
adtrust/oneway-trust-with-shared-secret.md
|
|
adtrust/samba-domain-controller.md
|
|
adtrust/samba-domain-member.md
|
|
adtrust/admin-ipa-as-trusted-user.md
|
|
adtrust/sudorules-with-ad-objects.md
|
|
adtrust/auto-private-groups.md
|
|
krb-ticket-policy.md
|
|
extdom-plugin-protocol.md
|
|
expiring-password-notification.md
|
|
ldap_pam_passthrough.md
|
|
libpwquality.md
|
|
membermanager.md
|
|
hidden-replicas.md
|
|
disable-stale-users.md
|
|
ldapi-autobind-services.md
|
|
subordinate-ids.md
|