diff options
| author | Thierry bordaz (tbordaz) <tbordaz@redhat.com> | 2014-08-07 16:29:02 +0200 |
|---|---|---|
| committer | Petr Viktorin <pviktori@redhat.com> | 2014-08-19 09:48:20 +0200 |
| commit | 04ea75a7a5109907ede2a0216bd39fac46a992c0 (patch) | |
| tree | 4578f63b2a8f1dd11fa3d89727841e0b698cf9e1 /install/updates/30-provisioning.update | |
| parent | 359dfe58b94079e1e16f4fb8960eb29b251f2cbc (diff) | |
| download | freeipa-04ea75a7a5109907ede2a0216bd39fac46a992c0.tar.gz freeipa-04ea75a7a5109907ede2a0216bd39fac46a992c0.tar.xz freeipa-04ea75a7a5109907ede2a0216bd39fac46a992c0.zip | |
User Life Cycle: create containers and scoping DS plugins
User Life Cycle is designed http://www.freeipa.org/page/V4/User_Life-Cycle_Management
It manages 3 containers (Staging, Active, Delete). At install/upgrade Delete and Staging
containers needs to be created.
Active: cn=users,cn=accounts,$SUFFIX
Delete: cn=deleted users,cn=accounts,cn=provisioning,$SUFFIX
Stage: cn=staged users ,cn=accounts,cn=provisioning,$SUFFIX
Plugins scopes:
krbPrincipalName, krbCanonicalName, ipaUniqueID, uid:
cn=accounts,SUFFIX
cn=deleted users,cn=accounts,cn=provisioning,SUFFIX
DNA:
cn=accounts,SUFFIX
Plugins exclude subtree:
IPA UUID, Referential Integrity, memberOf:
cn=provisioning,SUFFIX
https://fedorahosted.org/freeipa/ticket/3813
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
Diffstat (limited to 'install/updates/30-provisioning.update')
| -rw-r--r-- | install/updates/30-provisioning.update | 21 |
1 files changed, 21 insertions, 0 deletions
diff --git a/install/updates/30-provisioning.update b/install/updates/30-provisioning.update new file mode 100644 index 000000000..ef6d01a44 --- /dev/null +++ b/install/updates/30-provisioning.update @@ -0,0 +1,21 @@ +# bootstrap the user life cycle DIT structure. + +dn: cn=provisioning,$SUFFIX +add: objectclass: top +add: objectclass: nsContainer +add: cn: provisioning + +dn: cn=accounts,cn=provisioning,$SUFFIX +add: objectclass: top +add: objectclass: nsContainer +add: cn: accounts + +dn: cn=staged users,cn=accounts,cn=provisioning,$SUFFIX +add: objectclass: top +add: objectclass: nsContainer +add: cn: staged users + +dn: cn=deleted users,cn=accounts,cn=provisioning,$SUFFIX +add: objectclass: top +add: objectclass: nsContainer +add: cn: staged users |