freeipa.git/install/updates, branch gssapi-delegate

Correct sudo runasuser and runasgroup attributes in schema

2011-07-19T12:06:41+00:00

https://fedorahosted.org/freeipa/ticket/1309

Correct behavior for sudorunasgroup vs sudorunasuser

2011-07-19T12:06:21+00:00

https://fedorahosted.org/freeipa/ticket/1309

Set the ipa-modrdn plugin precedence to 60 so it runs last

2011-07-18T02:24:30+00:00

The default precedence for plugins is 50 and the run in more or less
alphabetical order (but not guaranteed). This plugin needs to run after
the others have already done their work.

https://fedorahosted.org/freeipa/ticket/1370

Disallow direct modifications to enrolledBy.

2011-07-14T23:11:49+00:00

This fixes a regression.

We don't need to allow enrolledBy to be modified because it gets
written in the ipa_enrollment plugin which does internal operations
so bypasses acis.

https://fedorahosted.org/freeipa/ticket/302

Configure Managed Entries on replicas.

2011-05-25T20:39:27+00:00

The Managed Entries plugin configurations weren't being created on
replica installs. The templates were there but the cn=config
portions were not.

This patch adds them as updates. The template portion will be added
in the initial replication.

ticket 1222

A new flag to disable creation of UPG

2011-05-25T06:39:47+00:00

Automatic creation may of User Private Groups (UPG) may not be
wanted at all times. This patch adds a new flag --noprivate to
ipa user-add command to disable it.

https://fedorahosted.org/freeipa/ticket/1131

Enable 389-ds SSL host checking by defauilt

2011-05-20T14:08:11+00:00

Enforce that the remote hostname matches the remote SSL server certificate
when 389-ds operates as an SSL client.

Also add an update file to turn this off for existing installations.

This also changes the way the ldapupdater modlist is generated to be more
like the framework. Single-value attributes are done as replacements
and there is a list of force-replacement attributes.

ticket 1069

The default groups we create should have ipaUniqueId set

2011-04-15T11:02:17+00:00

This adds a new directive to ipa-ldap-updater: addifnew. This will add
a new attribute only if it doesn't exist in the current entry. We can't
compare values because the value we are adding is automatically generated.

ticket 1177

Add memberHost and memberUser to default indexes

2011-04-08T15:00:24+00:00

https://fedorahosted.org/freeipa/ticket/1138

Fix ORDERING in some attributetypes and remove other unnecessary elements.

2011-04-06T01:46:32+00:00

Looking at the schema in 60basev2.ldif there were many attributes that did
not have an ORDERING matching rule specified correctly. There were also a
number of attributeTypes that should have been just SUP
distinguishedName that had a combination of SUP, SYNTAX, ORDERING, etc.

This requires 389-ds-base-1.2.8.0-1+

ticket 1153