Tomas Babej 63d4f30686 trusts: Do not pass base-id to the subdomain ranges ...

For trusted domains base id is calculated using a murmur3 hash of the
domain Security Identifier (SID). During trust-add we create ranges for
forest root domain and other forest domains. Since --base-id explicitly
overrides generated base id for forest root domain, its value should not
be passed to other forest domains' ranges -- their base ids must be
calculated based on their SIDs.

In case base id change for non-root forest domains is required, it can
be done manually through idrange-mod command after the trust is
established.

https://fedorahosted.org/freeipa/ticket/4041

2013-11-22 08:47:49 +01:00

..

plugins

trusts: Do not pass base-id to the subdomain ranges

2013-11-22 08:47:49 +01:00

__init__.py

Add IntEnum parameter to ipalib

2013-10-09 18:05:37 +02:00

aci.py

Remove some unused imports

2013-03-01 16:59:42 +01:00

backend.py

Add CLI parsing tests

2012-03-28 15:25:33 +02:00

base.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

capabilities.py

Change DNA magic value to -1 to make UID 999 usable

2013-03-11 17:07:07 +01:00

cli.py

Help plugin: don't fail if a topic's module is not found

2013-10-30 11:50:05 +01:00

config.py

Use DN objects instead of strings

2012-08-12 16:23:24 -04:00

constants.py

Remove entitlement support

2013-06-26 14:11:42 +02:00

crud.py

Add optional_create flag

2013-10-08 16:46:20 +02:00

errors.py

Deprecate HBAC source hosts from CLI

2013-04-12 14:07:55 -04:00

frontend.py

frontend: report arguments errors with better detail

2013-10-04 10:25:31 +02:00

krb_utils.py

Pylint cleanup.

2013-01-29 15:39:49 +01:00

messages.py

Add client capabilities, enable messages

2013-02-21 16:26:09 +01:00

output.py

Typo fixes

2012-06-25 21:35:11 -04:00

parameters.py

Add IntEnum parameter to ipalib

2013-10-09 18:05:37 +02:00

pkcs10.py

Fix assorted bugs found by pylint

2011-01-25 14:01:36 -05:00

plugable.py

Allow API plugin registration via a decorator

2013-08-14 12:08:27 +02:00

request.py

Remove deprecated i18n code from ipalib/request and all references to it.

2011-03-01 10:31:36 -05:00

rpc.py

Fix invalid assumption NSS initialization check in SSLTransport

2013-10-30 11:50:05 +01:00

session.py

Compliant client side session cookie behavior

2012-12-10 12:45:09 -05:00

text.py

Add ConcatenatedLazyText object

2013-11-21 10:34:25 +01:00

util.py

Don't exclude symlinks when loading plugins

2013-09-16 17:35:22 +02:00

x509.py

Skip cert issuer validation in service and host commands in CA-less install.

2013-07-09 14:22:57 -04:00