freeipa.git/install/updates, branch ad-work

Add Camellia ciphers to allowed list.

2013-07-18T07:49:38+00:00

https://fedorahosted.org/freeipa/ticket/3749

Fix for small syntax error in OTP schema

2013-07-11T09:39:29+00:00

https://fedorahosted.org/freeipa/ticket/3765

Add missing equality index for ipaUniqueId.

2013-07-11T09:39:26+00:00

https://fedorahosted.org/freeipa/ticket/3743

Add missing substring indices for attributes managed by the referint plugin.

2013-07-11T09:39:26+00:00

The referint plugin does a substring search on these attributes each time an
entry is deleted, which causes a noticable slowdown for large directories if
the attributes are not indexed.

https://fedorahosted.org/freeipa/ticket/3706

Enable SASL mapping fallback.

2013-06-27T15:06:51+00:00

Assign a default priority of 10 to our SASL mappings.

https://fedorahosted.org/freeipa/ticket/3330

Add ipaRangeType attribute to LDAP Schema

2013-06-10T09:27:33+00:00

This adds a new LDAP attribute ipaRangeType with
OID 2.16.840.1.113730.3.8.11.41 to the LDAP Schema.

ObjectClass ipaIDrange has been altered to require
ipaRangeType attribute.

Part of https://fedorahosted.org/freeipa/ticket/3647

Do not check userPassword with 7-bit plugin

2013-06-06T16:12:50+00:00

Default list of attributes that are checked with 7-bit plugin
for being 7-bit clean includes userPassword. Consecutively, one
is unable to set passwords that contain non-ascii characters.

https://fedorahosted.org/freeipa/ticket/3640

Add IPA OTP schema and ACLs

2013-05-17T07:30:51+00:00

This commit adds schema support for two factor authentication via
OTP devices, including RADIUS or TOTP. This schema will be used
by future patches which will enable two factor authentication
directly.

https://fedorahosted.org/freeipa/ticket/3365
http://freeipa.org/page/V3/OTP

Add ipaUserAuthType and ipaUserAuthTypeClass

2013-05-17T07:30:51+00:00

This schema addition will be useful for future commits. It allows us to
define permitted external authentication methods on both the user and
global config. The implementation is generic, but the immediate usage
is for otp support.

https://fedorahosted.org/freeipa/ticket/3365
http://freeipa.org/page/V3/OTP

Fix syntax errors in schema files

2013-04-26T15:15:16+00:00

- add missing closing parenthesis in idnsRecord declaration
- remove extra dollar sign from ipaSudoRule declaration
- handle missing/extraneous X-ORIGIN lines in 10-selinuxusermap.update

This does not use the schema updater because the syntax needs to be
fixed in the files themselves, otherwise 389 1.3.2+ will fail
to start.
Older DS versions transparently fix the syntax errors.

The existing ldap-updater directive for ipaSudoRule is fixed
(ldap-updater runs after upgradeconfig).

https://fedorahosted.org/freeipa/ticket/3578