diff options
| author | Thierry bordaz (tbordaz) <tbordaz@redhat.com> | 2014-08-07 16:29:02 +0200 |
|---|---|---|
| committer | Petr Viktorin <pviktori@redhat.com> | 2014-08-19 09:48:20 +0200 |
| commit | 04ea75a7a5109907ede2a0216bd39fac46a992c0 (patch) | |
| tree | 4578f63b2a8f1dd11fa3d89727841e0b698cf9e1 /install/updates/20-syncrepl.update | |
| parent | 359dfe58b94079e1e16f4fb8960eb29b251f2cbc (diff) | |
| download | freeipa-04ea75a7a5109907ede2a0216bd39fac46a992c0.tar.gz freeipa-04ea75a7a5109907ede2a0216bd39fac46a992c0.tar.xz freeipa-04ea75a7a5109907ede2a0216bd39fac46a992c0.zip | |
User Life Cycle: create containers and scoping DS plugins
User Life Cycle is designed http://www.freeipa.org/page/V4/User_Life-Cycle_Management
It manages 3 containers (Staging, Active, Delete). At install/upgrade Delete and Staging
containers needs to be created.
Active: cn=users,cn=accounts,$SUFFIX
Delete: cn=deleted users,cn=accounts,cn=provisioning,$SUFFIX
Stage: cn=staged users ,cn=accounts,cn=provisioning,$SUFFIX
Plugins scopes:
krbPrincipalName, krbCanonicalName, ipaUniqueID, uid:
cn=accounts,SUFFIX
cn=deleted users,cn=accounts,cn=provisioning,SUFFIX
DNA:
cn=accounts,SUFFIX
Plugins exclude subtree:
IPA UUID, Referential Integrity, memberOf:
cn=provisioning,SUFFIX
https://fedorahosted.org/freeipa/ticket/3813
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
Diffstat (limited to 'install/updates/20-syncrepl.update')
| -rw-r--r-- | install/updates/20-syncrepl.update | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/install/updates/20-syncrepl.update b/install/updates/20-syncrepl.update index e1184bf48..7a26f7b68 100644 --- a/install/updates/20-syncrepl.update +++ b/install/updates/20-syncrepl.update @@ -10,11 +10,17 @@ add:nsslapd-changelogmaxage: 2d # indices for cn=changelog. dn: cn=MemberOf Plugin,cn=plugins,cn=config add:memberofentryscope: '$SUFFIX' +add:memberofentryscopeexcludesubtree: 'cn=provisioning,$SUFFIX' dn: cn=referential integrity postoperation,cn=plugins,cn=config add:nsslapd-plugincontainerscope: '$SUFFIX' add:nsslapd-pluginentryscope: '$SUFFIX' +add:nsslapd-pluginExcludeEntryScope: 'cn=provisioning,$SUFFIX' # Enable SyncRepl dn: cn=Content Synchronization,cn=plugins,cn=config only:nsslapd-pluginEnabled: on + +# Make sure IPA UUID does not generate ipaUniqueID for Stage/Delete entries +dn: cn=IPA Unique IDs,cn=IPA UUID,cn=plugins,cn=config +add:ipaUuidExcludeSubtree: 'cn=provisioning,$SUFFIX' |