public/freeipa
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
d308abac2e6758014ebb39bcbd0fc3bd61a57db2
freeipa/install/share
T
History
Fraser Tweedale 1a35a2e213 Add CommonNameToSANDefault to default cert profile 
The CommonNameToSANDefault component was added to Dogtag 10.4.  When
a profile is configured to use it, this profile copies the CN in the
certificate to the Subject Alternative Name extension as a dNSName
(if and only if it does look like a DNS name).

It is desirable that the default service profile use this component.
Add it to the default profile, for new installations only.  For
existing installations, until a proper profile update mechanism is
implemented, administrators who wish to use it must configure it via
the 'certprofile-mod' command.

Fixes: https://pagure.io/freeipa/issue/7007
Reviewed-By: Jan Cholasta <jcholast@redhat.com>
2017-06-27 14:25:58 +00:00
..
advise
Build: remove incorrect use of MAINTAINERCLEANFILES
2016-11-16 09:12:07 +01:00
profiles
Add CommonNameToSANDefault to default cert profile
2017-06-27 14:25:58 +00:00
schema.d
Build: remove incorrect use of MAINTAINERCLEANFILES
2016-11-16 09:12:07 +01:00
05rfc2247.ldif
Remove references to GPL v2.0 license
2015-02-20 15:40:42 +01:00
15rfc2307bis.ldif
Add formerly update-only schema
2013-11-18 16:54:21 +01:00
15rfc4876.ldif
Add formerly update-only schema
2013-11-18 16:54:21 +01:00
60basev2.ldif
idviews: Add necessary schema for the ID views
2014-09-30 10:42:06 +02:00
60basev3.ldif
Short name resolution: introduce the required schema
2017-03-14 18:37:10 +01:00
60certificate-profiles.ldif
Add 'ca' plugin
2016-06-15 07:13:38 +02:00
60ipaconfig.ldif
Unify capitalization of attribute names in schema files
2013-11-18 16:54:22 +01:00
60ipadns.ldif
DNS: Support URI resource record type
2016-10-11 16:48:47 +02:00
60ipapk11.ldif
DNSSEC: schema
2014-10-21 12:23:03 +02:00
60kerberos.ldif
ipa_kdb: add krbPrincipalAuthInd handling
2016-05-02 19:15:45 +02:00
60samba.ldif
Make schema files conform to new updater
2013-11-18 16:54:21 +01:00
61kerberos-ipav3.ldif
mark 'ipaKrbPrincipalAlias' attribute as deprecated in schema
2016-06-23 09:48:06 +02:00
65ipacertstore.ldif
Add LDAP schema for certificate store.
2014-07-30 16:04:21 +02:00
65ipasudo.ldif
Update X-ORIGIN for 4.0
2014-07-01 13:57:06 +02:00
70ipaotp.ldif
Revert "Make all ipatokenTOTP attributes mandatory"
2015-01-21 09:20:15 +01:00
70topology.ldif
handle multiple managed suffixes
2015-10-15 14:24:33 +02:00
71idviews.ldif
idviews: Add user certificate attribute to user ID overrides
2016-05-06 07:12:01 +02:00
72domainlevels.ldif
Add Domain Level feature
2015-05-26 11:59:47 +00:00
73certmap.ldif
Support for Certificate Identity Mapping
2017-03-02 15:09:42 +01:00
anon-princ-aci.ldif
Use Anonymous user to obtain FAST armor ccache
2017-02-15 07:13:37 +01:00
automember.ldif
34 Create FreeIPA CLI Plugin for the 389 Auto Membership plugin
2011-08-31 09:49:43 +02:00
bind.named.conf.template
named.conf template: add modification warning
2017-05-23 12:37:48 +02:00
bootstrap-template.ldif
Set "KDC:Disable Last Success" by default
2017-03-27 18:24:05 +02:00
ca-topology.uldif
Revert "upgrade: add replica bind DN group check interval to CA topology config"
2016-12-09 15:47:13 +01:00
caJarSigningCert.cfg.template
Add signing profile to CA installation so we can sign the firefox jar file.
2009-05-04 16:54:42 -04:00
certmap.conf.template
Define template version in certmap.conf
2017-03-01 12:46:50 +01:00
custodia.conf.template
ipapython: move dnssec, p11helper and secrets to ipaserver
2016-11-29 14:50:51 +01:00
default-aci.ldif
aci: replace per-server ACIs with ipaserver-based ACIs
2015-12-07 08:13:23 +01:00
default-hbac.ldif
Remove sourcehostcategory from the default HBAC rule.
2014-02-06 16:46:24 +01:00
default-smb-group.ldif
Change DNA magic value to -1 to make UID 999 usable
2013-03-11 17:07:07 +01:00
default-trust-view.ldif
idviews: Add Default Trust View as part of adtrustinstall
2014-09-30 10:42:06 +02:00
delegation.ldif
DNS Locations: Always create DNS related privileges
2016-06-03 15:58:21 +02:00
dna.ldif
Moved update of DNA plugin among update plugins
2016-11-11 12:13:56 +01:00
dns.ldif
DNS: Support URI resource record type
2016-10-11 16:48:47 +02:00
dnssec.ldif
DNSSEC: DNS key synchronization daemon
2014-10-21 12:23:03 +02:00
domainlevel.ldif
Add Domain Level feature
2015-05-26 11:59:47 +00:00
ds-nfiles.ldif
Autotune directory server to use a greater number of files
2010-11-22 12:42:16 -05:00
entryusn.ldif
Address entryusn initialization on replica installation
2011-01-28 13:58:43 -05:00
gssapi.login
Change session handling
2017-02-15 07:13:37 +01:00
gssproxy.conf.template
Add options to allow ticket caching
2017-03-16 13:10:37 +01:00
host_nis_groups.ldif
Move Managed Entries into their own container in the replicated space.
2011-09-12 16:28:27 -04:00
indices.ldif
Create indexes for krbCanonicalName attribute
2016-07-27 19:25:29 +02:00
ipa-httpd.conf.template
Remove non-sensical kdestroy on https stop
2017-02-22 15:50:48 +01:00
ipa.conf.tmpfiles
Add a new user to run the framework code
2017-02-15 07:13:37 +01:00
ipakrb5.aug
install: introduce generic Kerberos Augeas lens
2017-05-19 12:31:24 +02:00
kdc_extensions.template
Add support for configuring KDC certs for PKINIT
2010-11-18 15:09:36 -05:00
kdc_req.conf.template
Add support for configuring KDC certs for PKINIT
2010-11-18 15:09:36 -05:00
kdc.conf.template
server install: fix KDC PKINIT configuration
2017-05-19 12:31:24 +02:00
kdcproxy-disable.uldif
Provide Kerberos over HTTP (MS-KKDCP)
2015-06-24 10:43:58 +02:00
kdcproxy-enable.uldif
Provide Kerberos over HTTP (MS-KKDCP)
2015-06-24 10:43:58 +02:00
kdcproxy.conf
Provide Kerberos over HTTP (MS-KKDCP)
2015-06-24 10:43:58 +02:00
kdcproxy.wsgi
Replace hard-coded kdcproxy path with WSGI script
2017-04-12 13:05:23 +02:00
kerberos.ldif
Use only AES enctypes by default
2016-01-13 15:24:53 +01:00
krb5.conf.template
client install: fix client PKINIT configuration
2017-05-19 12:31:24 +02:00
krb5.ini.template
Set master_kdc and dns_lookup_kdc to true
2012-09-19 20:47:12 -04:00
krb.con.template
Mass tree reorganization for IPAv2. To view previous history of files use:
2009-02-03 15:27:14 -05:00
krbrealm.con.template
Mass tree reorganization for IPAv2. To view previous history of files use:
2009-02-03 15:27:14 -05:00
ldapi.ldif
Enable ldapi connections in the management framework.
2009-08-27 13:36:58 -04:00
Makefile.am
install: introduce generic Kerberos Augeas lens
2017-05-19 12:31:24 +02:00
managed-entries.ldif
Move Managed Entries into their own container in the replicated space.
2011-09-12 16:28:27 -04:00
master-entry.ldif
Add Domain Level feature
2015-05-26 11:59:47 +00:00
memberof-conf.ldif
Display user and host membership in netgroups.
2010-11-24 08:38:41 -05:00
memberof-task.ldif
Wait for memberof task and DS to start before proceeding in installation.
2011-04-22 11:43:50 +02:00
memcache-remove.uldif
Change session handling
2017-02-15 07:13:37 +01:00
modrdn-krbprinc.ldif
add krbCanonicalName to attributes watched by MODRDN plugin
2016-06-23 09:48:06 +02:00
nis-update.uldif
Upgrade: Fix upgrade of NIS Server configuration
2016-01-11 09:45:54 +01:00
nis.uldif
Enable transactions by default, make password and modrdn TXN-aware
2012-11-21 14:55:12 +01:00
opendnssec_conf.template
Use ODS_USER/ODS_GROUP in opendnssec_conf.template
2016-03-23 13:32:55 +01:00
opendnssec_kasp.template
DNSSEC: update OpenDNSSEC KASP configuration
2015-05-19 12:50:56 +00:00
referint-conf.ldif
Update referential integrity config for DS 1.3.3
2014-09-12 17:42:08 +02:00
replica-acis.ldif
fix permission: Read Replication Agreements
2016-02-25 14:30:01 +01:00
replica-automember.ldif
34 Create FreeIPA CLI Plugin for the 389 Auto Membership plugin
2011-08-31 09:49:43 +02:00
replica-s4u2proxy.ldif
Add cifs principal to S4U2Proxy targets only when running ipa-adtrust-install
2012-10-09 18:15:01 -04:00
repoint-managed-entries.ldif
Move Managed Entries into their own container in the replicated space.
2011-09-12 16:28:27 -04:00
root-autobind.ldif
Remove root autobind search restriction, fix upgrade logging & error handling.
2011-06-13 09:51:05 +02:00
sasl-mapping-fallback.ldif
Enable SASL mapping fallback.
2013-06-27 17:06:51 +02:00
schema-update.ldif
Fix nsslapdPlugin object class after initial replication.
2013-09-10 09:49:43 +02:00
smb.conf.empty
Add trust management for Active Directory trusts
2012-06-07 09:39:09 +02:00
smb.conf.template
adtrust: remove FILE: prefix from 'dedicated keytab file' in smb.conf
2016-12-12 16:39:32 +01:00
sudobind.ldif
Create default disabled sudo bind user
2011-02-23 15:32:24 -05:00
topology-entries.ldif
rename topology suffixes to "domain" and "ca"
2015-12-04 12:59:21 +01:00
unique-attributes.ldif
Server Upgrade: Fix uniqueness plugins
2015-05-19 12:45:41 +00:00
user_private_groups.ldif
Move Managed Entries into their own container in the replicated space.
2011-09-12 16:28:27 -04:00
uuid.ldif
DNSSEC: DNS key synchronization daemon
2014-10-21 12:23:03 +02:00
vault.ldif
install: support KRA update
2015-09-17 14:55:54 +02:00
wsgi.py
Set explicit confdir option for global contexts
2016-12-02 09:14:35 +01:00