freeipa.git/install/updates, branch testing

Configure Managed Entries on replicas.

2011-05-25T20:39:27+00:00

The Managed Entries plugin configurations weren't being created on
replica installs. The templates were there but the cn=config
portions were not.

This patch adds them as updates. The template portion will be added
in the initial replication.

ticket 1222

A new flag to disable creation of UPG

2011-05-25T06:39:47+00:00

Automatic creation may of User Private Groups (UPG) may not be
wanted at all times. This patch adds a new flag --noprivate to
ipa user-add command to disable it.

https://fedorahosted.org/freeipa/ticket/1131

Enable 389-ds SSL host checking by defauilt

2011-05-20T14:08:11+00:00

Enforce that the remote hostname matches the remote SSL server certificate
when 389-ds operates as an SSL client.

Also add an update file to turn this off for existing installations.

This also changes the way the ldapupdater modlist is generated to be more
like the framework. Single-value attributes are done as replacements
and there is a list of force-replacement attributes.

ticket 1069

The default groups we create should have ipaUniqueId set

2011-04-15T11:02:17+00:00

This adds a new directive to ipa-ldap-updater: addifnew. This will add
a new attribute only if it doesn't exist in the current entry. We can't
compare values because the value we are adding is automatically generated.

ticket 1177

Add memberHost and memberUser to default indexes

2011-04-08T15:00:24+00:00

https://fedorahosted.org/freeipa/ticket/1138

Fix ORDERING in some attributetypes and remove other unnecessary elements.

2011-04-06T01:46:32+00:00

Looking at the schema in 60basev2.ldif there were many attributes that did
not have an ORDERING matching rule specified correctly. There were also a
number of attributeTypes that should have been just SUP
distinguishedName that had a combination of SUP, SYNTAX, ORDERING, etc.

This requires 389-ds-base-1.2.8.0-1+

ticket 1153

Allow a client to enroll using principal when the host has a OTP

2011-03-30T14:03:44+00:00

If the host has a one-time password but krbPrincipalName wasn't set yet
then the enrollment would fail because writing the principal is not
allowed. This creates an ACI that only lets it be written if it is not
already set.

ticket 1075

Store list of non-master replicas in DIT and provide way to list them

2011-03-02T14:46:46+00:00

Fixes: https://fedorahosted.org/freeipa/ticket/1007

Use Sudo rather than SUDO as a label.

2011-03-01T21:48:35+00:00

ticket 1005

Add default roles and permissions for HBAC, SUDO and pw policy

2011-02-22T15:02:24+00:00

Created some default roles as examples. In doing so I realized that
we were completely missing default rules for HBAC, SUDO and password
policy so I added those as well.

I ran into a problem when the updater has a default record and an add
at the same time, it should handle it better now.

ticket 585