freeipa

0 Fork 0

Files

T

Alexander Bokovoy bd0d858043 Add trust-related ACIs

A high-level description of the design and ACIs for trusts is available at
https://www.redhat.com/archives/freeipa-devel/2011-December/msg00224.html
and
https://www.redhat.com/archives/freeipa-devel/2011-December/msg00248.html

Ticket #1731

2012-06-07 09:39:10 +02:00

10-60basev2.update

Disallow direct modifications to enrolledBy.

2011-07-14 19:11:49 -04:00

10-60basev3.update

Perform case-insensitive searches for principals on TGS requests

2012-06-07 09:39:10 +02:00

10-bind-schema.update

Update schema for bind-dyndb-ldap

2012-02-24 09:40:36 +01:00

10-config.update

Set nsslapd-minssf-exclude-rootdse to on so the DSE is always available.

2012-03-26 14:26:10 +02:00

10-RFC2307bis.update

Name update files so they can be easily sorted.

2009-03-25 11:03:07 -04:00

10-RFC4876.update

Fix quoting to work with new csv handler in ldapupdate

2009-05-19 11:50:39 -06:00

10-schema_compat.update

- create a "cn=computers" compat area populated with ieee802Device entries corresponding to computers with fqdn and macAddress attributes

2012-04-26 09:00:17 +02:00

10-selinuxusermap.update

Add update files for SELinuxUserMap

2012-02-15 12:28:37 +01:00

10-ssh.update

Add LDAP schema for SSH public keys.

2012-02-13 22:20:18 -05:00

10-sudo.update

Add support for sudoOrder

2012-03-01 21:02:33 -05:00

19-managed-entries.update

Move Managed Entries into their own container in the replicated space.

2011-09-12 16:28:27 -04:00

20-aci.update

Add LDAP ACIs for SSH public key schema.

2012-02-13 22:20:23 -05:00

20-dna.update

Name update files so they can be easily sorted.

2009-03-25 11:03:07 -04:00

20-host_nis_groups.update

Move Managed Entries into their own container in the replicated space.

2011-09-12 16:28:27 -04:00

20-indices.update

- index the fqdn and macAddress attributes for the sake of the compat plugin

2012-04-26 09:00:11 +02:00

20-nss_ldap.update

Name update files so they can be easily sorted.

2009-03-25 11:03:07 -04:00

20-replication.update

Name update files so they can be easily sorted.

2009-03-25 11:03:07 -04:00

20-user_private_groups.update

Add plugin framework to LDAP updates.

2011-11-22 23:57:10 -05:00

20-winsync_index.update

Name update files so they can be easily sorted.

2009-03-25 11:03:07 -04:00

21-replicas_container.update

Store list of non-master replicas in DIT and provide way to list them

2011-03-02 09:46:46 -05:00

30-policy.update

Re-number some attributes to compress our usage to be contiguous

2010-05-27 10:50:49 -04:00

30-s4u2proxy.update

Add S4U2Proxy delegation permissions on upgrades

2012-02-15 18:00:46 +01:00

40-automember.update

Enable automember for upgraded servers

2011-11-29 09:02:06 +01:00

40-delegation.update

Don't allow "Modify Group membership" permission to manage admins

2012-02-23 11:05:52 +01:00

40-dns.update

permission-find missed some results with --pkey-only option

2012-06-01 07:51:59 +02:00

45-roles.update

Reorder privileges so that memberof for permissions are generated properly.

2011-12-08 10:08:10 +01:00

50-groupuuid.update

The default groups we create should have ipaUniqueId set

2011-04-15 13:02:17 +02:00

50-hbacservice.update

Add additional pam ftp services to HBAC, and a ftp HBAC service group

2011-08-24 15:21:41 -04:00

50-ipaconfig.update

Add update files for SELinuxUserMap

2012-02-15 12:28:37 +01:00

50-lockout-policy.update

Disallow direct modifications to enrolledBy.

2011-07-14 19:11:49 -04:00

50-nis.update

- add a pair of ethers maps for computers with hardware addresses on file

2012-04-26 09:00:22 +02:00

55-pbacmemberof.update

Reorder privileges so that memberof for permissions are generated properly.

2011-12-08 10:08:10 +01:00

60-trusts.update

Add trust-related ACIs

2012-06-07 09:39:10 +02:00

61-trusts-s4u2proxy.update

Add separate attribute to store trusted domain SID

2012-06-07 09:39:09 +02:00

Makefile.am

Add separate attribute to store trusted domain SID

2012-06-07 09:39:09 +02:00

README

Name update files so they can be easily sorted.

2009-03-25 11:03:07 -04:00

README

The update files are sorted before being processed because there are
cases where order matters (such as getting schema added first, creating
parent entries, etc).

10 - 20: Schema
20 - 30: FDS Configuration, new indices
30 - 40: Structual elements of the DIT
40 - 50: Pre-loaded data