summaryrefslogtreecommitdiffstats
path: root/install/updates/60-trusts.update
Commit message (Expand)AuthorAgeFilesLines
* trusts: add ACIs to allow AD trust agents to fetch cross-realm keytabsAlexander Bokovoy2015-07-071-0/+1
* Server Upgrade: remove CSV from upgrade filesMartin Basti2015-05-111-6/+6
* Upgrade: fix trusts objectclass violationiMartin Basti2014-11-131-6/+0
* trusts: Make cn=adtrust agents sysaccount nestedgroupTomas Babej2014-07-181-0/+1
* trusts: Allow reading system trust accounts by adtrust agentsTomas Babej2014-06-251-0/+8
* Remove the global anonymous read ACIPetr Viktorin2014-05-261-1/+0
* aci-update: Trim the admin write blacklistPetr Viktorin2014-04-251-6/+0
* acl: Remove krbPrincipalExpiration from list of admin's excluded attrsTomas Babej2014-01-141-1/+3
* Remove schema modifications from update filesPetr Viktorin2013-11-181-39/+0
* Do not add kadmin/changepw ACIs on new installsMartin Kosek2013-10-251-1/+0
* ipa-sam: do not modify objectclass when trust object already createdAlexander Bokovoy2013-09-201-0/+1
* Add nfs:NONE to default PAC types only when neededTomas Babej2013-04-151-5/+0
* Add Kerberos ticket flags management to service and host plugins.Jan Cholasta2013-03-291-1/+3
* Add NFS specific default for authorization data typeSumit Bose2013-03-081-0/+5
* Remove ORDERING for IA5 attributeTypesMartin Kosek2013-02-271-6/+3
* Add missing v3 schema on upgrades, fix typo in schema.Rob Crittenden2013-02-221-9/+22
* Add SID blacklist attributesMartin Kosek2013-02-121-3/+7
* Add cifs principal to S4U2Proxy targets only when running ipa-adtrust-installAlexander Bokovoy2012-10-091-4/+0
* Add ACI to allow regenerating ipaNTHash from ipasamAlexander Bokovoy2012-08-221-1/+2
* Add per-service option to store the types of PAC it supportsRob Crittenden2012-08-011-0/+4
* Remove ipaNTHash from global allow ACIMartin Kosek2012-06-261-0/+5
* Use exop instead of kadmin.localSumit Bose2012-06-111-1/+1
* Add trust-related ACIsAlexander Bokovoy2012-06-071-0/+36
* Add separate attribute to store trusted domain SIDAlexander Bokovoy2012-06-071-0/+26