1 files changed, 17 insertions, 1 deletions
diff --git a/ipalib/plugins/config.py b/ipalib/plugins/config.py
index 3030ce7c7..a3851e369 100644
--- a/ipalib/plugins/config.py
+++ b/ipalib/plugins/config.py
@@ -35,7 +35,7 @@ class config(LDAPObject):
         'ipamaxusernamelength', 'ipahomesrootdir', 'ipadefaultloginshell',
         'ipadefaultprimarygroup', 'ipadefaultdomain', 'ipasearchtimelimit',
         'ipasearchrecordslimit', 'ipausersearchfields', 'ipagroupsearchfields',
-        'ipamigrationenabled',
+        'ipamigrationenabled', 'ipacertificatesubjectbase',
     ]
     attribute_names = {
         'ipamaxusernamelength': 'maximum username length',
@@ -48,52 +48,68 @@ class config(LDAPObject):
         'ipausersearchfields': 'search fields for users',
         'ipagroupsearchfields': 'search fields for groups',
         'ipamigrationenabled': 'enable migration mode',
+        'ipacertificatesubjectbase': 'base for certificate subjects',
     }
 
     takes_params = (
         Int('ipamaxusernamelength?',
             cli_name='maxusername',
+            label='Max. Username length',
             doc='Max. Username length',
             minvalue=1,
         ),
         Str('ipahomesrootdir?',
             cli_name='homedirectory',
+            label='Home Directory base',
             doc='Default location of home directories',
         ),
         Str('ipadefaultloginshell?',
             cli_name='defaultshell',
+            label='Default shell',
             doc='Default shell for new users',
         ),
         Str('ipadefaultprimarygroup?',
             cli_name='defaultgroup',
+            label='Default users group',
             doc='Default group for new users',
         ),
         Str('ipadefaultemaildomain?',
             cli_name='emaildomain',
+            label='Default e-mail domain',
             doc='Default e-mail domain new users',
         ),
         Int('ipasearchtimelimit?',
             cli_name='searchtimelimit',
+            label='Search time limit',
             doc='Max. amount of time (sec.) for a search (-1 is unlimited)',
             minvalue=-1,
         ),
         Int('ipasearchrecordslimit?',
             cli_name='searchrecordslimit',
+            label='Search size limit',
             doc='Max. number of records to search (-1 is unlimited)',
             minvalue=-1,
         ),
         Str('ipausersearchfields?',
             cli_name='usersearch',
+            label='User search fields',
             doc='A comma-separated list of fields to search when searching for users',
         ),
         Str('ipagroupsearchfields?',
             cli_name='groupsearch',
+            label='Group search fields',
             doc='A comma-separated list of fields to search when searching for groups',
         ),
         Bool('ipamigrationenabled?',
+            doc='Migration mode',
             cli_name='enable_migration',
             doc='Enabled migration mode',
         ),
+        Str('ipacertificatesubjectbase?',
+            label='Certificate Subject base',
+            cli_name='subject',
+            doc='base for certificate subjects (OU=Test,O=Example)',
+        ),
     )
 
     def get_dn(self, *keys, **kwargs):