diff options
author | Rob Crittenden <rcritten@redhat.com> | 2010-06-25 16:14:46 -0400 |
---|---|---|
committer | Rob Crittenden <rcritten@redhat.com> | 2010-07-06 15:39:34 -0400 |
commit | ba59d9d648d7ee9f3e5b03ede9aeccab97f13a13 (patch) | |
tree | f333b0335b3ebdd0d198f3afcd0f274daae5950a /install/share/dna-upg.ldif | |
parent | 83fd9ef7cc7823619692a0286cbcec5297245153 (diff) | |
download | freeipa-ba59d9d648d7ee9f3e5b03ede9aeccab97f13a13.tar.gz freeipa-ba59d9d648d7ee9f3e5b03ede9aeccab97f13a13.tar.xz freeipa-ba59d9d648d7ee9f3e5b03ede9aeccab97f13a13.zip |
Add support for User-Private Groups
This uses a new 389-ds plugin, Managed Entries, to automatically create
a group entry when a user is created. The DNA plugin ensures that the
group has a gidNumber that matches the users uidNumber. When the user is
removed the group is automatically removed as well.
If the managed entries plugin is not available or if a specific, separate
range for gidNumber is passed in at install time then User-Private Groups
will not be configured.
The code checking for the Managed Entries plugin may be removed at some
point. This is there because this plugin is only available in a 389-ds
alpha release currently (1.2.6-a4).
Diffstat (limited to 'install/share/dna-upg.ldif')
-rw-r--r-- | install/share/dna-upg.ldif | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/install/share/dna-upg.ldif b/install/share/dna-upg.ldif new file mode 100644 index 000000000..c4edcfaa4 --- /dev/null +++ b/install/share/dna-upg.ldif @@ -0,0 +1,16 @@ +# add plugin configuration for user private groups + +dn: cn=User Private Groups,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config +changetype: add +objectclass: top +objectclass: extensibleObject +cn: Posix Accounts +dnaType: uidNumber +dnaType: gidNumber +dnaNextValue: eval($UIDSTART+1) +dnaInterval: 1 +dnaMaxValue: eval($UIDSTART+100000) +dnaMagicRegen: 999 +dnaFilter: (|(objectclass=posixAccount)(objectClass=posixGroup)) +dnaScope: $SUFFIX + |