freeipa.git - FreeIPA project

	Commit message (Collapse)	Author	Age	Files	Lines
*	Fix replica setup using replication admin kerberos credentials	Simo Sorce	2011-03-01	1	-0/+5
\| \| \| \|	Fixes: https://fedorahosted.org/freeipa/ticket/1022
*	Rename permissions and privileges to be more readable.	Rob Crittenden	2011-01-31	1	-4/+4
\| \| \| \| \| \| \|	This also drops description from permissions since it seems redundant and fixes up the help text a little. ticket 792
*	ACI plugin supports prefixes	Martin Kosek	2011-01-26	1	-3/+3
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	When more than one plugin produce ACIs, they share common namespace of ACI name. This may lead to name collisions between the ACIs from different plugins. This patch introduces a mandatory "prefix" attribute for non-find ACI operations which allow plugins to use their own prefixes (i.e. namespaces) which is then used when a name of the ACI is generated. Permission, Delegation and Selfservice plugins has been updated to use their own prefixes thus avoiding name collisions by using their own namespaces. Default ACIs in LDIFs has been updated to follow this new policy. Permission plugin now uses its CN (=primary key) instead of description in ACI names as Description may not be unique. This change requires an IPA server reinstall since the default ACI set has been changed. https://fedorahosted.org/freeipa/ticket/764
*	Allow using Kerberos credentials with the 'connect' command	Simo Sorce	2011-01-14	1	-1/+1
\| \| \| \| \| \| \| \|	Now that we can setup GSSAPI authenticated replication we are not tied to use the Directory Manager password to set up replication agreements. Fixes: https://fedorahosted.org/freeipa/ticket/644
*	Move permissions and privileges to their own container, cn=pbac,$SUFFIX	Rob Crittenden	2010-12-22	1	-4/+4
\| \| \| \|	ticket 638
*	Rework old init and synch commands and use better names.	Simo Sorce	2010-12-21	1	-0/+4
\| \| \| \| \| \| \| \|	These commands can now be run exclusively o the replica that needs to be resynced or reinitialized and the --from command must be used to tell from which other replica it can will pull data. Fixes: https://fedorahosted.org/freeipa/ticket/626
*	Remove referrals when removing agreements	Simo Sorce	2010-12-21	1	-2/+8
\| \| \| \| \| \| \| \| \|	Part of this fix requires also giving proper permission to change the replication agreements root. While there also fix replica-related permissions to have the classic add/modify/remove triplet of permissions. Fixes: https://fedorahosted.org/freeipa/ticket/630
*	Add replication related acis to all replicas	Simo Sorce	2010-12-21	1	-0/+11
	Fixes: https://fedorahosted.org/freeipa/ticket/617