summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorThierry Bordaz <tbordaz@redhat.com>2015-04-16 13:21:57 +0200
committerMartin Kosek <mkosek@redhat.com>2015-05-18 09:37:21 +0200
commitc9e1ad0dbc28c6c5b0e7381144a969f6b77d504d (patch)
tree81e5c02e481dbb0cd9de8a20b6b61138dc566a95
parent0b644ebc96215456f0d10cbe94dcd78a9e9f2598 (diff)
downloadfreeipa-c9e1ad0dbc28c6c5b0e7381144a969f6b77d504d.tar.gz
freeipa-c9e1ad0dbc28c6c5b0e7381144a969f6b77d504d.tar.xz
freeipa-c9e1ad0dbc28c6c5b0e7381144a969f6b77d504d.zip
User life cycle: DNA DS plugin should exclude provisioning DIT
Set the DNAexcludescope on provisioning part of the DIT https://fedorahosted.org/freeipa/ticket/3813 Reviewed-By: David Kupka <dkupka@redhat.com>
-rw-r--r--install/updates/20-dna.update1
1 files changed, 1 insertions, 0 deletions
diff --git a/install/updates/20-dna.update b/install/updates/20-dna.update
index 04047dd12..75fae7b82 100644
--- a/install/updates/20-dna.update
+++ b/install/updates/20-dna.update
@@ -5,6 +5,7 @@ only:nsslapd-pluginEnabled: on
# Change the magic value to -1
dn: cn=Posix IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config
only:dnaMagicRegen: -1
+add: dnaExcludeScope: cn=provisioning,$SUFFIX
dn: cn=ipa-winsync,cn=plugins,cn=config
remove:ipaWinSyncUserAttr: uidNumber 999