freeipa.git/ipaserver/install/plugins, branch ad-work

Permit reads to ipatokenRadiusProxyUser objects

2013-07-11T09:39:27+00:00

This fixes an outstanding permissions issue from the OTP work.

https://fedorahosted.org/freeipa/ticket/3693

Add update plugin to fill in ipaRangeType attribute

2013-06-10T09:27:34+00:00

Previously, we deduced the range type from the range objectclass
and filled in virtual attribute in post_callback phase.

Having a ipaRangeType attributeType in schema, we need to fill
the attribute values to ranges created in previous IPA versions.

The plugin follows the same approach, setting ipa-local or
ipa-ad-trust value to the ipaRangeType attribute according
to the objectclass of the range.

Part of https://fedorahosted.org/freeipa/ticket/3647

Add IPA OTP schema and ACLs

2013-05-17T07:30:51+00:00

This commit adds schema support for two factor authentication via
OTP devices, including RADIUS or TOTP. This schema will be used
by future patches which will enable two factor authentication
directly.

https://fedorahosted.org/freeipa/ticket/3365
http://freeipa.org/page/V3/OTP

Update only selected attributes for winsync agreement

2013-04-16T14:05:43+00:00

Trying to insert nsDS5ReplicatedAttributeListTotal and
nsds5ReplicaStripAttrs to winsync agreements caused upgrade errors.
With this patch, these attributes are skipped for winsync agreements.

Made find_ipa_replication_agreements() in replication.py more
corresponding to find_replication_agreements. It returns list of
entries instead of unicode strings now.

https://fedorahosted.org/freeipa/ticket/3522

Add nfs:NONE to default PAC types only when needed

2013-04-15T12:46:21+00:00

We need to add nfs:NONE as a default PAC type only if there's no
other default PAC type for nfs. Adds a update plugin which
determines whether default PAC type for nfs is set and adds
nfs:NONE PAC type accordingly.

https://fedorahosted.org/freeipa/ticket/3555

Remove ipaserver/ipaldap.py

2013-03-13T11:36:33+00:00

In addition to removing the module, fix all places where it was imported.

Preparation for: https://fedorahosted.org/freeipa/ticket/3446

Don't base64-encode the CA cert when uploading it during an upgrade.

2013-03-07T08:40:07+00:00

We want to store the raw value. Tools like ldapsearch will automatically
base64 encode the value because it's binary so we don't want to duplicate
that.

https://fedorahosted.org/freeipa/ticket/3477

Remove support for DN normalization from LDAPClient.

2013-03-01T15:59:47+00:00

Remove some uses of raw python-ldap

2013-03-01T15:59:46+00:00

Part of the work for: https://fedorahosted.org/freeipa/ticket/2660

Replace entry.getValue by entry.single_value

2013-03-01T15:59:45+00:00

Part of the work for: https://fedorahosted.org/freeipa/ticket/2660