From 0fc1d260c08d54f7189f20814f2ebc7cbb031918 Mon Sep 17 00:00:00 2001 From: Adam Young Date: Wed, 5 Jan 2011 10:27:45 -0500 Subject: metadata update --- install/static/test/data/config_show.json | 68 +- install/static/test/data/ipa_init.json | 3005 +++++++++++++++---------- install/static/test/data/krbtpolicy_show.json | 73 +- install/static/test/data/pwpolicy_mod.json | 56 + install/static/test/data/pwpolicy_show.json | 52 +- 5 files changed, 2024 insertions(+), 1230 deletions(-) create mode 100644 install/static/test/data/pwpolicy_mod.json (limited to 'install') diff --git a/install/static/test/data/config_show.json b/install/static/test/data/config_show.json index e52d1df66..e3b6154b9 100644 --- a/install/static/test/data/config_show.json +++ b/install/static/test/data/config_show.json @@ -1,11 +1,42 @@ { "error": null, - "id": 6, + "id": 4, "result": { "result": { - "dn": "cn=ipaconfig,cn=etc,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com", + "attributelevelrights": { + "aci": "rscwo", + "cn": "rscwo", + "ipacertificatesubjectbase": "rscwo", + "ipaconfigstring": "rscwo", + "ipacustomfields": "rscwo", + "ipadefaultemaildomain": "rscwo", + "ipadefaultloginshell": "rscwo", + "ipadefaultprimarygroup": "rscwo", + "ipagroupobjectclasses": "rscwo", + "ipagroupsearchfields": "rscwo", + "ipahomesrootdir": "rscwo", + "ipamaxusernamelength": "rscwo", + "ipamigrationenabled": "rscwo", + "ipapwdexpadvnotify": "rscwo", + "ipasearchrecordslimit": "rscwo", + "ipasearchtimelimit": "rscwo", + "ipauserobjectclasses": "rscwo", + "ipausersearchfields": "rscwo", + "nsaccountlock": "rscwo", + "objectclass": "rscwo" + }, + "cn": [ + "ipaConfig" + ], + "dn": "cn=ipaconfig,cn=etc,dc=ipa14,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com", "ipacertificatesubjectbase": [ - "O=IPA" + "O=IPA14.AYOUNG.BOSTON.DEVEL.REDHAT.COM" + ], + "ipaconfigstring": [ + "AllowNThash" + ], + "ipadefaultemaildomain": [ + "ayoung.boston.devel.redhat.com" ], "ipadefaultloginshell": [ "/bin/sh" @@ -13,6 +44,13 @@ "ipadefaultprimarygroup": [ "ipausers" ], + "ipagroupobjectclasses": [ + "top", + "groupofnames", + "nestedgroup", + "ipausergroup", + "ipaobject" + ], "ipagroupsearchfields": [ "cn,description" ], @@ -20,19 +58,39 @@ "/home" ], "ipamaxusernamelength": [ - "8" + "32" ], "ipamigrationenabled": [ "FALSE" ], + "ipapwdexpadvnotify": [ + "4" + ], "ipasearchrecordslimit": [ - "0" + "100" ], "ipasearchtimelimit": [ "2" ], + "ipauserobjectclasses": [ + "top", + "person", + "organizationalperson", + "inetorgperson", + "inetuser", + "posixaccount", + "krbprincipalaux", + "krbticketpolicyaux", + "ipaobject" + ], "ipausersearchfields": [ "uid,givenname,sn,telephonenumber,ou,title" + ], + "objectclass": [ + "nsContainer", + "top", + "ipaGuiConfig", + "ipaConfigObject" ] }, "summary": null, diff --git a/install/static/test/data/ipa_init.json b/install/static/test/data/ipa_init.json index 6228b2964..1b43c81d3 100644 --- a/install/static/test/data/ipa_init.json +++ b/install/static/test/data/ipa_init.json @@ -12,10 +12,10 @@ }, "automountkey": { "aciattrs": [ - "automountInformation", - "automountKey", - "objectClass", - "description" + "automountinformation", + "automountkey", + "description", + "objectclass" ], "attribute_members": {}, "bindable": false, @@ -47,6 +47,23 @@ "parent_object": "automountmap", "primary_key": "automountkey", "rdn_attribute": "", + "relationships": { + "member": [ + "Member", + "", + "no_" + ], + "memberindirect": [ + "Indirect Member", + null, + "no_indirect_" + ], + "memberof": [ + "Parent", + "in_", + "not_in_" + ] + }, "takes_params": [ { "alwaysask": false, @@ -132,7 +149,7 @@ "automountlocation": { "aciattrs": [ "cn", - "objectClass" + "objectclass" ], "attribute_members": {}, "bindable": false, @@ -163,6 +180,23 @@ "parent_object": "", "primary_key": "cn", "rdn_attribute": "", + "relationships": { + "member": [ + "Member", + "", + "no_" + ], + "memberindirect": [ + "Indirect Member", + null, + "no_indirect_" + ], + "memberof": [ + "Parent", + "in_", + "not_in_" + ] + }, "takes_params": [ { "alwaysask": false, @@ -195,9 +229,9 @@ }, "automountmap": { "aciattrs": [ - "automountMapName", - "objectClass", - "description" + "automountmapname", + "description", + "objectclass" ], "attribute_members": {}, "bindable": false, @@ -229,6 +263,23 @@ "parent_object": "automountlocation", "primary_key": "automountmapname", "rdn_attribute": "", + "relationships": { + "member": [ + "Member", + "", + "no_" + ], + "memberindirect": [ + "Indirect Member", + null, + "no_indirect_" + ], + "memberof": [ + "Parent", + "in_", + "not_in_" + ] + }, "takes_params": [ { "alwaysask": false, @@ -319,6 +370,23 @@ "object_name_plural": "entries", "parent_object": "", "rdn_attribute": "", + "relationships": { + "member": [ + "Member", + "", + "no_" + ], + "memberindirect": [ + "Indirect Member", + null, + "no_indirect_" + ], + "memberof": [ + "Parent", + "in_", + "not_in_" + ] + }, "takes_params": [ { "alwaysask": false, @@ -706,900 +774,900 @@ }, "cosentry": { "aciattrs": [ - "cn", - "objectClass", - "replicaUpdateSchedule", - "javaClassName", - "printer-compression-supported", - "printer-color-supported", - "radiusSimultaneousUse", - "printer-number-up-supported", - "printer-finishings-supported", - "printer-pages-per-minute-color", - "printer-pages-per-minute", - "printer-print-quality-supported", - "printer-resolution-supported", - "printer-media-supported", - "printer-sides-supported", - "nisPublickey", - "radiusReplicateToRealm", - "replicaRoot", - "nsDefaultObjectClass", - "memberOf", - "radiusLoginTime", - "audio", + "a6record", + "aaaarecord", + "accessruletype", + "accesstime", + "accessto", + "accountinactivitylimit", + "accountunlocktime", + "acctpolicysubentry", "aci", - "sambaDomainName", - "sambaNextRid", - "sambaLogonTime", - "sambaLogoffTime", - "sambaKickoffTime", - "sambaHomeDrive", - "sambaLogonScript", - "sambaProfilePath", - "sambaUserWorkstations", - "sambaHomePath", - "nsBuildNumber", - "netscapeReversiblePassword", - "krbLastPwdChange", - "krbPwdMinLength", - "javaFactory", - "krbMinPwdLife", - "mInfoRecord", - "roomNumber", - "nsBindPassword", - "pTRRecord", - "hInfoRecord", - "krbSubTrees", - "aFSDBRecord", - "vendorVersion", - "vendorName", - "krbPrincipalAliases", - "nsAdminSIEDN", - "krbPrincContainerRef", - "memberService", - "ipaCertificateSubjectBase", - "ipaMigrationEnabled", - "krbLastSuccessfulAuth", - "nsSSLClientAuth", - "sudoOption", - "krbPrincipalName", - "ipaGroupObjectClasses", - "managedBy", - "ipaPwdExpAdvNotify", - "ipaUserObjectClasses", - "radiusPortLimit", - "sudoUser", - "calCalURI", - "calFBURL", - "userClass", - "krbExtraData", - "krbSupportedEncSaltTypes", - "nsAdminAccessAddresses", - "ipServiceProtocol", - "ntUserCodePage", - "krbLdapServers", - "krbKdcServers", - "nsDS5ReplicaName", - "nsPreference", - "krbPrincipalType", - "nsDS5ReplicaReferral", - "FTPQuotaMBytes", - "passwordMustChange", - "matchingRuleUse", - "structuralObjectClass", - "mailQuota", - "mailProgramDeliveryInfo", - "mgrpErrorsTo", - "mgrpDeliverTo", - "mailRoutingAddress", - "enhancedSearchGuide", - "dITStructureRules", - "x500UniqueIdentifier", - "mgrpMsgRejectAction", - "krbMaxTicketLife", - "attributeTypes", - "objectClasses", - "crossCertificatePair", - "nisNetIdHost", - "nsslapd-changelogsuffix", - "mepRDNAttr", - "nsslapd-suffix", - "nsslapd-parent-suffix", - "nisNetIdGroup", - "replicaCFUpdated", - "userPKCS12", - "oid", - "passwordAllowChangeTime", - "memberURL", - "memberCertificateDescription", - "vlvSort", - "replicaHost", - "vlvUses", - "replicaAbandonedChanges", - "passwordCheckSyntax", - "passwordChange", - "passwordInHistory", - "passwordKeepHistory", - "passwordResetDuration", - "passwordMaxFailure", - "passwordExp", - "passwordMinLength", + "administratorcontactinfo", + "adminrole", + "adminurl", + "afsdbrecord", + "aliasedobjectname", + "altserver", + "arecord", + "associateddomain", + "associatedname", + "attributemap", + "attributetypes", + "audio", + "authenticationmethod", + "authorityrevocationlist", + "authorizedservice", + "automountinformation", + "automountkey", + "automountmapname", + "bindtimelimit", + "bootfile", + "bootparameter", + "buildingname", + "businesscategory", "c", - "l", - "retryCountResetTime", - "passwordUnlock", - "passwordExpWarned", - "passwordRetryCount", - "aliasedObjectName", - "inetUserHttpURL", - "inetUserStatus", - "inetDomainStatus", - "inetDomainBaseDN", - "inetSubscriberResponse", - "inetSubscriberChallenge", - "inetSubscriberAccountId", - "printer-stacking-order-supported", - "printer-delivery-orientation-supported", - "printer-media-local-supported", - "printer-output-features-supported", - "nSRecord", - "printer-job-priority-supported", - "printer-service-person", - "serviceAuthenticationMethod", - "dc", - "lastModifiedBy", - "mDRecord", - "aRecord", - "secretary", - "homePhone", - "lastModifiedTime", - "nsHelpRef", - "krbLastFailedAuth", - "pwdpolicysubentry", - "nsAdminEnableEnduser", - "nsDS5ReplicaUpdateSchedule", - "credentialLevel", - "passwordGraceUserTime", - "passwordGraceLimit", - "objectclassMap", - "nsDS5Task", - "nsds5BeginReplicaRefresh", - "parentid", - "entryid", - "entryusn", - "nsDS5Flags", - "adminRole", - "entrydn", - "dncomp", - "sambaShareName", - "sambaAlgorithmicRidBase", - "sambaBoolOption", - "sambaOptionName", - "sambaStringOption", - "sambaIntegerOption", - "sambaMungedDial", - "sambaStringListOption", - "sambaBadPasswordTime", - "sambaBadPasswordCount", - "radiusPrompt", - "ipaDefaultPrimaryGroup", - "ipaMaxUsernameLength", - "ipaUserSearchFields", - "ipaGroupSearchFields", - "ipaSearchTimeLimit", - "ipaSearchRecordsLimit", - "ipaCustomFields", - "ipaHomesRootDir", - "ipaDefaultLoginShell", - "radiusTerminationAction", - "radiusTunnelAssignmentId", - "radiusTunnelMediumType", - "radiusTunnelPassword", + "cacertificate", + "calcaladruri", + "calcaluri", + "calcapuri", + "calfburl", + "calothercaladruris", + "calothercaluris", + "calothercapuris", + "calotherfburls", + "carlicense", + "certificaterevocationlist", + "certrecord", + "changelog", + "changelogmaximumage", + "changelogmaximumconcurrentwrites", + "changelogmaximumsize", + "changenumber", "changes", - "newRdn", - "radiusServiceType", - "radiusSessionTimeout", - "employeeType", - "changeNumber", - "targetDn", - "changeType", - "radiusTunnelPreference", - "carLicense", - "departmentNumber", - "employeeNumber", - "accessTo", - "dSRecord", - "nsSuiteSpotUser", - "nSECRecord", - "rRSIGRecord", - "sSHFPRecord", - "authenticationMethod", - "profileTTL", - "bindTimeLimit", - "followReferrals", - "preferredServerList", - "searchTimeLimit", - "defaultServerList", - "defaultSearchBase", - "radiusTunnelPrivateGroupId", - "nsClassname", - "attributeMap", - "userCertificate", - "radiusTunnelServerEndpoint", - "seeAlso", - "radiusVSA", - "radiusClientIPAddress", - "radiusAuthType", - "subtreeACI", - "radiusGroupName", - "radiusProfileDn", - "radiusHuntgroupName", - "ntUserLogonServer", - "ntUserNumLogons", - "ntUserUnitsPerWeek", - "ntUserParms", - "authorityRevocationList", - "ntUserAuthFlags", - "nsDS5ReplicaCredentials", - "mgrpBroadcasterPolicy", - "nsds7DirsyncCookie", - "nsSerialNumber", - "nsds5ReplConflict", - "idnsSOAexpire", - "idnsSOAminimum", - "idnsSOArName", - "idnsSOAserial", - "idnsSOArefresh", - "idnsSOAretry", - "idnsName", - "idnsAllowDynUpdate", - "idnsZoneActive", - "idnsSOAmName", - "ipaSudoRunAsUserCategory", - "ipaSudoRunAsGroup", - "ipaSudoRunAs", - "ipaSudoRunAsExtUser", - "externalUser", - "ipaSudoOpt", - "memberDenyCmd", - "cmdCategory", - "memberAllowCmd", - "nsAdminUsers", - "eduPersonPrimaryOrgUnitDN", - "eduPersonScopedAffiliation", - "eduPersonPrincipalName", - "eduPersonEntitlement", - "eduPersonOrgUnitDN", - "eduPersonPrimaryAffiliation", - "eduPersonNickName", - "eduPersonOrgDN", - "eduPersonAffiliation", - "hostCategory", - "ipaEnabledFlag", - "cosAttribute", + "changetime", + "changetype", + "cirbeginorc", + "cirbindcredentials", + "cirbinddn", + "cirhost", + "cirlastupdateapplied", + "cirport", + "cirreplicaroot", + "cirsyncinterval", + "cirupdatefailedat", + "cirupdateschedule", + "cirusepersistentsearch", + "cirusessl", + "cmdcategory", + "cn", + "cnamerecord", + "co", + "connection", + "copiedfrom", + "copyingfrom", + "cosattribute", + "cosindirectspecifier", + "cospriority", "cosspecifier", "costargettree", "costemplatedn", - "ipaClientVersion", - "enrolledBy", - "ipaUniqueID", - "userCategory", - "memberHost", + "createtimestamp", + "creatorsname", + "credentiallevel", + "crosscertificatepair", + "dc", + "defaultsearchbase", + "defaultsearchscope", + "defaultserverlist", + "deleteoldrdn", + "deltarevocationlist", + "departmentnumber", + "dereferencealiases", + "description", + "destinationindicator", + "dialupaccess", + "displayname", + "distinguishedname", + "ditcontentrules", + "ditredirect", + "ditstructurerules", + "dnamerecord", + "dncomp", + "dnqualifier", + "dnsclass", + "dnsttl", + "documentauthor", + "documentidentifier", + "documentlocation", + "documentpublisher", + "documenttitle", + "documentversion", + "drink", + "dsrecord", + "edupersonaffiliation", + "edupersonentitlement", + "edupersonnickname", + "edupersonorgdn", + "edupersonorgunitdn", + "edupersonprimaryaffiliation", + "edupersonprimaryorgunitdn", + "edupersonprincipalname", + "edupersonscopedaffiliation", + "employeenumber", + "employeetype", + "enhancedsearchguide", + "enrolledby", + "entrydn", + "entryid", + "entryusn", + "externalhost", + "externaluser", + "facsimiletelephonenumber", + "filterinfo", + "followreferrals", "fqdn", - "memberUser", - "nsProductName", - "tXTRecord", - "nsIndexType", - "mozillaCustom3", - "nsSSL2", - "cNAMERecord", - "nsAdminCgiWaitPid", - "nsValueSyntax", - "nswmExtendedUserPrefs", - "nsValueFlags", - "ntUserComment", - "ntUserWorkstations", - "ntUserScriptPath", - "ntUserLastLogoff", - "nsValueHelpURL", - "ntUserMaxStorage", - "ntUserAcctExpires", - "replicaPort", - "nsds5ReplicaLegacyConsumer", - "radiusTunnelType", - "mgrpRemoveHeader", - "nsds5replicaLastInitStart", - "nsSchemaCSN", - "nsds5replicaTimeout", - "nsds5replicaLastInitEnd", - "nsds5replicaLastInitStatus", - "radiusTunnelClientEndpoint", - "homePostalAddress", - "userPassword", - "mgrpApprovePassword", - "owner", - "roleOccupant", - "radiusHint", - "jpegPhoto", - "ntUserPasswordExpired", - "nsAdminEnableDSGW", - "ditRedirect", - "ntUserProfile", - "documentPublisher", - "trustModel", - "printer-uri", - "krbCanonicalName", - "replicaLastRelevantChange", - "nisDomain", - "serviceCategory", - "accessTime", - "nisDomainName", - "ipaConfigString", - "hostCApolicy", - "sourceHost", - "externalHost", - "sourceHostCategory", - "accessRuleType", - "nsSynchUserIDFormat", - "nsSNMPMasterHost", - "ntUserUsrComment", - "telephoneNumber", - "certificateRevocationList", - "nsServerID", - "copiedFrom", - "nsDeleteclassname", + "ftpdownloadbandwidth", + "ftpdownloadratio", + "ftpgid", + "ftpquotafiles", + "ftpquotambytes", + "ftpstatus", + "ftpuid", + "ftpuploadbandwidth", + "ftpuploadratio", + "gecos", "generation", - "nsTaskLabel", - "nsExpirationDate", - "sabayonProfileURL", - "sabayonProfileName", - "idnsUpdatePolicy", - "ntUserHomeDir", - "nsAIMid", - "nsKeyfile", - "nsSSL3", - "nsmsgDisallowAccess", - "mailDeliveryOption", - "mailForwardingAddress", - "mailAutoReplyMode", - "mailAutoReplyText", - "mailAccessDomain", - "mailAlternateAddress", - "deleteOldRdn", - "newSuperior", - "mailHost", - "mailMessageStore", - "passwordMaxRepeats", - "passwordMin8bit", - "passwordMinTokenLength", - "passwordMinCategories", - "isReplicated", - "nsSymmetricKey", - "mepManagedEntry", - "mepManagedBy", - "mepMappedAttr", - "mepStaticAttr", - "krbPwdPolicyReference", - "sambaGroupType", - "KeyRecord", - "ldapSchemas", - "changeTime", - "dNSClass", - "dNSTTL", - "cirPort", - "cirHost", - "cirUsePersistentSearch", - "cirBindDn", - "ntGroupId", - "cirUseSsl", - "cirUpdateSchedule", - "cirLastUpdateApplied", - "cirSyncInterval", - "cirUpdateFailedat", - "nsSSLPersonalitySSL", - "nsSNMPOrganization", - "nsds5ReplicaChangeCount", - "nsds5replicaLastUpdateStart", - "nsds5replicaLastUpdateEnd", - "nsds5replicaChangesSentSinceStartup", - "cosPriority", - "nsds5ReplicaPurgeDelay", - "nsds5ReplicaTombstonePurgeInterval", - "nsSNMPContact", - "nsds5replicaLastUpdateStatus", - "nsds5replicaUpdateInProgress", - "manager", - "documentIdentifier", - "documentTitle", - "documentVersion", - "documentAuthor", - "documentLocation", - "nsDS5ReplicaId", - "parentOrganization", - "printer-aliases", - "printer-charset-configured", - "passwordStorageScheme", - "vacationstartdate", - "nsInstalledLocation", - "ipaDefaultEmailDomain", - "oneWaySync", - "accountInactivityLimit", - "acctPolicySubentry", - "vlvScope", - "vlvFilter", - "nsCertConfig", - "mozillaWorkStreet2", - "mozillaWorkUrl", - "mozillaHomeCountryName", - "mozillaHomeUrl", - "mozillaHomeState", - "replicaEntryFilter", - "replicaNickName", - "mozillaHomeLocalityName", - "filterInfo", - "mozillaHomeStreet", - "sambaMinPwdLength", - "sambaPwdHistoryLength", - "ipaSudoRunAsExtGroup", - "nsTimeLimit", - "hostMask", - "sambaLogonHours", - "sambaTrustFlags", - "sambaSIDList", - "ntUserCountryCode", - "nsServerPort", - "krbPwdMinDiffChars", - "krbMaxRenewableAge", - "ntUserLogonHours", - "ref", - "serviceCredentialLevel", - "ntUserBadPwCount", - "krbMaxPwdLife", - "nsSSLActivation", - "replicatedattributelist", - "radiusCallbackId", - "radiusCallbackNumber", - "radiusCalledStationId", - "radiusCallingStationId", - "radiusArapFeatures", - "radiusArapSecurity", - "radiusArapZoneAccess", - "sambaPwdLastSet", - "ntUserHomeDirDrive", - "radiusClass", - "radiusFilterId", - "preferredTimeZone", - "preferredLocale", - "modifyTimestamp", - "sn", - "krbPwdHistoryLength", - "krbMKey", - "radiusRealm", - "replicaBindMethod", - "replicaBeginOrc", - "replicaUpdateReplayed", - "radiusStripUserName", - "krbObjectReferences", - "replicaUseSSL", - "radiusUserCategory", - "nsUniqueAttribute", - "radiusCheckItem", - "krbHostServer", - "ipHostNumber", - "photo", - "info", - "drink", - "mail", - "uid", - "shadowFlag", - "shadowExpire", - "memberNisNetgroup", - "memberUid", - "ipServicePort", - "nisNetgroupTriple", - "ipProtocolNumber", + "generationqualifier", + "gidnumber", + "givenname", + "governingstructurerule", + "hassubordinates", + "hinforecord", + "homedirectory", + "homephone", + "homepostaladdress", "host", - "nsSecureServerPort", - "nsOsVersion", - "nsAdminEndUserHTMLIndex", - "nsLdapSchemaVersion", - "krbLoginFailedCount", - "nsJarfilename", - "krbRealmReferences", - "nsServerCreationClassname", + "hostcapolicy", + "hostcategory", + "hostmask", + "houseidentifier", + "idnsallowdynupdate", + "idnsname", + "idnssoaexpire", + "idnssoaminimum", + "idnssoamname", + "idnssoarefresh", + "idnssoaretry", + "idnssoarname", + "idnssoaserial", + "idnsupdatepolicy", + "idnszoneactive", + "inetdomainbasedn", + "inetdomainstatus", + "inetsubscriberaccountid", + "inetsubscriberchallenge", + "inetsubscriberresponse", + "inetuserhttpurl", + "inetuserstatus", + "info", "initials", - "cirBindCredentials", - "nsExecRef", - "ntUniqueId", - "nsDirectoryFailoverList", - "nsNYR", - "preferredDeliveryMethod", - "krbPrincNamingAttr", - "nsSSL3Ciphers", - "telexNumber", - "nsSynchUniqueAttribute", - "facsimileTelephoneNumber", - "teletexTerminalIdentifier", - "internationalISDNNumber", - "x121Address", - "destinationIndicator", - "registeredAddress", - "passwordMinLowers", - "passwordMinSpecials", - "pamIDMapMethod", - "pamIDAttr", - "pamFallback", - "pamSecure", - "pamService", - "passwordMinDigits", - "passwordMinAlphas", - "passwordMinUppers", - "nsslapd-pluginEnabled", - "nsslapd-pluginDescription", - "replicaBindDn", - "nsSNMPEnabled", - "nsCertfile", - "nsSNMPLocation", - "nsDS5ReplicaType", - "nsSNMPDescription", - "nsds50ruv", - "nsSNMPMasterPort", - "nsDS5ReplicatedAttributeList", - "nsDS5ReplicaRoot", - "nsDS5ReplicaBindMethod", - "nsmsgNumMsgQuota", - "nsDS5ReplicaBindDN", - "nsDS5ReplicaTransportInfo", - "nsValueCES", - "nsValueTel", - "nsValueInt", - "nsValueBin", - "ntGroupAttributes", - "displayName", - "ntUserPrimaryGroupId", - "nsValueCIS", - "nsValueDN", - "nsValueType", - "ntUserPriv", - "krbPwdHistory", - "dITContentRules", - "krbPrincipalReferences", - "nsAdminDomainName", - "krbTicketFlags", - "buildingName", - "co", - "pager", + "installationtimestamp", + "internationalisdnnumber", + "ipacertificatesubjectbase", + "ipaclientversion", + "ipaconfigstring", + "ipacustomfields", + "ipadefaultemaildomain", + "ipadefaultloginshell", + "ipadefaultprimarygroup", + "ipaenabledflag", + "ipagroupobjectclasses", + "ipagroupsearchfields", + "ipahomesrootdir", + "ipamaxusernamelength", + "ipamigrationenabled", + "ipapwdexpadvnotify", + "ipasearchrecordslimit", + "ipasearchtimelimit", + "ipasudoopt", + "ipasudorunas", + "ipasudorunasextgroup", + "ipasudorunasextuser", + "ipasudorunasgroup", + "ipasudorunasgroupcategory", + "ipasudorunasusercategory", + "ipauniqueid", + "ipauserobjectclasses", + "ipausersearchfields", + "iphostnumber", + "ipnetmasknumber", + "ipnetworknumber", + "ipprotocolnumber", + "ipserviceport", + "ipserviceprotocol", + "isreplicated", + "javaclassname", + "javaclassnames", + "javacodebase", + "javadoc", + "javafactory", + "javareferenceaddress", + "javaserializeddata", + "jpegphoto", + "keyrecord", + "krbadmservers", + "krbcanonicalname", + "krbdefaultencsalttypes", + "krbextradata", + "krbhostserver", + "krbkdcservers", + "krblastfailedauth", + "krblastpwdchange", + "krblastsuccessfulauth", + "krbldapservers", + "krbloginfailedcount", + "krbmaxpwdlife", + "krbmaxrenewableage", + "krbmaxticketlife", + "krbminpwdlife", + "krbmkey", + "krbobjectreferences", + "krbpasswordexpiration", + "krbprinccontainerref", + "krbprincipalaliases", + "krbprincipalexpiration", + "krbprincipalkey", + "krbprincipalname", + "krbprincipalreferences", + "krbprincipaltype", + "krbprincnamingattr", + "krbpwdfailurecountinterval", + "krbpwdhistory", + "krbpwdhistorylength", + "krbpwdlockoutduration", + "krbpwdmaxfailure", + "krbpwdmindiffchars", + "krbpwdminlength", + "krbpwdpolicyreference", + "krbpwdservers", + "krbrealmreferences", + "krbsearchscope", + "krbsubtrees", + "krbsupportedencsalttypes", + "krbticketflags", + "krbticketpolicyreference", + "krbupenabled", + "kxrecord", + "l", + "labeleduri", + "lastlogintime", + "lastmodifiedby", + "lastmodifiedtime", + "ldapschemas", + "ldapsyntaxes", + "locrecord", + "loginshell", + "macaddress", + "mail", + "mailaccessdomain", + "mailalternateaddress", + "mailautoreplymode", + "mailautoreplytext", + "maildeliveryoption", + "mailenhanceduniquemember", + "mailforwardingaddress", + "mailhost", + "mailmessagestore", + "mailprogramdeliveryinfo", + "mailquota", + "mailroutingaddress", + "managedby", + "manager", + "matchingrules", + "matchingruleuse", + "mdrecord", + "member", + "memberallowcmd", + "membercertificatedescription", + "memberdenycmd", + "memberhost", + "membernisnetgroup", + "memberof", + "memberservice", + "memberuid", + "memberurl", + "memberuser", + "mepmanagedby", + "mepmanagedentry", + "mepmappedattr", + "meprdnattr", + "mepstaticattr", + "mgrpaddheader", + "mgrpallowedbroadcaster", + "mgrpalloweddomain", + "mgrpapprovepassword", + "mgrpbroadcasterpolicy", + "mgrpdeliverto", + "mgrperrorsto", + "mgrpmoderator", + "mgrpmsgmaxsize", + "mgrpmsgrejectaction", + "mgrpmsgrejecttext", + "mgrpnoduplicatechecks", + "mgrpremoveheader", + "mgrprfc822mailmember", + "minforecord", "mobile", - "personalTitle", - "labeledURI", - "organizationalStatus", - "uniqueIdentifier", - "supportedFeatures", - "nsServerAddress", - "krbTicketPolicyReference", - "sambaRefuseMachinePwdChange", - "sambaForceLogoff", - "a6Record", - "sambaLockoutObservationWindow", - "sambaLockoutDuration", - "sambaMinPwdAge", - "sambaMaxPwdAge", - "sambaLogonToChgPwd", - "sRVRecord", - "nXTRecord", - "kXRecord", - "certRecord", - "nsRevisionNumber", - "nAPTRRecord", - "st", - "printer-xri-supported", - "nsSSLToken", - "krbPrincipalExpiration", - "krbUPEnabled", - "hasSubordinates", - "radiusFramedProtocol", - "radiusFramedRoute", - "modifiersName", - "radiusFramedMTU", - "radiusFramedIPAddress", - "radiusFramedIPNetmask", - "radiusFramedAppleTalkZone", - "radiusFramedCompression", - "radiusFramedAppleTalkLink", - "radiusFramedAppleTalkNetwork", - "street", - "radiusProxyToRealm", - "nsUserRDNComponent", - "nsDirectoryInfoRef", - "nsHostLocation", - "cACertificate", - "nsSSLSessionTimeout", - "governingStructureRule", - "krbDefaultEncSaltTypes", - "passwordHistory", + "modifiersname", + "modifytimestamp", + "mozillacustom1", + "mozillacustom2", + "mozillacustom3", + "mozillacustom4", + "mozillahomecountryname", + "mozillahomelocalityname", + "mozillahomepostalcode", + "mozillahomestate", + "mozillahomestreet", + "mozillahomestreet2", + "mozillahomeurl", + "mozillanickname", + "mozillasecondemail", + "mozillausehtmlmail", + "mozillaworkstreet2", + "mozillaworkurl", + "multilinedescription", + "mxrecord", + "name", + "nameforms", + "namingcontexts", + "naptrrecord", + "netscapereversiblepassword", + "newrdn", + "newsuperior", + "nisdomain", + "nisdomainname", + "nismapentry", + "nismapname", + "nisnetgrouptriple", + "nisnetidgroup", + "nisnetidhost", + "nisnetiduser", + "nispublickey", + "nissecretkey", + "nsaccesslog", + "nsaccountlock", + "nsadminaccessaddresses", + "nsadminaccesshosts", + "nsadminaccountinfo", + "nsadmincachelifetime", + "nsadmincgiwaitpid", + "nsadmindomainname", + "nsadminenabledsgw", + "nsadminenableenduser", + "nsadminenduserhtmlindex", + "nsadmingroupname", + "nsadminoneacldir", + "nsadminsiedn", + "nsadminusers", + "nsaimid", + "nsbackendsuffix", + "nsbasedn", + "nsbinddn", + "nsbindpassword", + "nsbuildnumber", + "nsbuildsecurity", + "nscertconfig", + "nscertfile", + "nsclassname", + "nsconfigroot", + "nscpentrydn", + "nsdefaultacceptlanguage", + "nsdefaultobjectclass", + "nsdeleteclassname", + "nsdirectoryfailoverlist", + "nsdirectoryinforef", + "nsdirectoryurl", + "nsdisplayname", + "nsds50ruv", + "nsds5beginreplicarefresh", + "nsds5debugreplicatimeout", + "nsds5flags", + "nsds5replconflict", + "nsds5replicaautoreferral", + "nsds5replicabinddn", + "nsds5replicabindmethod", + "nsds5replicabusywaittime", + "nsds5replicachangecount", + "nsds5replicachangessentsincestartup", + "nsds5replicacredentials", + "nsds5replicahost", + "nsds5replicaid", + "nsds5replicalastinitend", + "nsds5replicalastinitstart", + "nsds5replicalastinitstatus", + "nsds5replicalastupdateend", + "nsds5replicalastupdatestart", + "nsds5replicalastupdatestatus", + "nsds5replicalegacyconsumer", + "nsds5replicaname", + "nsds5replicaport", + "nsds5replicapurgedelay", + "nsds5replicareferral", + "nsds5replicaroot", + "nsds5replicasessionpausetime", + "nsds5replicatedattributelist", + "nsds5replicatimeout", + "nsds5replicatombstonepurgeinterval", + "nsds5replicatransportinfo", + "nsds5replicatype", + "nsds5replicaupdateinprogress", + "nsds5replicaupdateschedule", + "nsds5task", + "nsds7directoryreplicasubtree", + "nsds7dirsynccookie", + "nsds7newwingroupsyncenabled", + "nsds7newwinusersyncenabled", + "nsds7windowsdomain", + "nsds7windowsreplicasubtree", + "nsecrecord", + "nsencryptionalgorithm", + "nserrorlog", + "nsexecref", + "nsexpirationdate", + "nsgrouprdncomponent", + "nshardwareplatform", + "nshelpref", + "nshostlocation", + "nsidletimeout", + "nsindextype", + "nsinstalledlocation", + "nsjarfilename", + "nskeyfile", + "nsldapschemaversion", + "nslicensedfor", + "nslicenseendtime", + "nslicensestarttime", + "nslogsuppress", + "nslookthroughlimit", + "nsmatchingrule", + "nsmsgdisallowaccess", + "nsmsgnummsgquota", + "nsnickname", + "nsnyr", + "nsosversion", + "nsparentuniqueid", + "nspidlog", + "nspreference", + "nsproductname", + "nsproductversion", + "nsrecord", + "nsrevisionnumber", + "nsrole", + "nsroledn", + "nsrolefilter", + "nsruvreplicalastmodified", + "nssaslmapbasedntemplate", + "nssaslmapfiltertemplate", + "nssaslmapregexstring", + "nsschemacsn", + "nssecureserverport", + "nsserialnumber", + "nsserveraddress", + "nsservercreationclassname", + "nsserverid", + "nsservermigrationclassname", + "nsserverport", + "nsserversecurity", + "nssizelimit", + "nsslapd-changelogsuffix", + "nsslapd-ldapiautodnsuffix", + "nsslapd-parent-suffix", + "nsslapd-plugindescription", + "nsslapd-pluginenabled", + "nsslapd-pluginid", + "nsslapd-plugininitfunc", + "nsslapd-pluginpath", + "nsslapd-plugintype", + "nsslapd-pluginvendor", + "nsslapd-pluginversion", + "nsslapd-suffix", + "nssnmpcontact", + "nssnmpdescription", + "nssnmpenabled", + "nssnmplocation", + "nssnmpmasterhost", + "nssnmpmasterport", + "nssnmpname", + "nssnmporganization", + "nsssl2", + "nsssl2ciphers", + "nsssl3", + "nsssl3ciphers", + "nsssl3sessiontimeout", + "nssslactivation", + "nssslclientauth", + "nssslpersonalityssl", + "nssslsessiontimeout", + "nssslsupportedciphers", + "nsssltoken", + "nsstate", + "nssuitespotuser", + "nssymmetrickey", + "nssynchuniqueattribute", + "nssynchuseridformat", + "nssystemindex", + "nstasklabel", + "nstimelimit", + "nsuniqueattribute", + "nsuniqueid", + "nsuseridformat", + "nsuserrdncomponent", + "nsvaluebin", + "nsvalueces", + "nsvaluecis", + "nsvaluedefault", + "nsvaluedescription", + "nsvaluedn", + "nsvalueflags", + "nsvaluehelpurl", + "nsvalueint", + "nsvaluesyntax", + "nsvaluetel", + "nsvaluetype", + "nsvendor", + "nsviewconfiguration", + "nsviewfilter", + "nswellknownjarfiles", + "nswmextendeduserprefs", + "ntgroupattributes", + "ntgroupcreatenewgroup", + "ntgroupdeletegroup", + "ntgroupdomainid", + "ntgroupid", + "ntgrouptype", + "ntuniqueid", + "ntuseracctexpires", + "ntuserauthflags", + "ntuserbadpwcount", + "ntusercodepage", + "ntusercomment", + "ntusercountrycode", + "ntusercreatenewaccount", + "ntuserdeleteaccount", + "ntuserdomainid", + "ntuserflags", + "ntuserhomedir", + "ntuserhomedirdrive", + "ntuserlastlogoff", + "ntuserlastlogon", + "ntuserlogonhours", + "ntuserlogonserver", + "ntusermaxstorage", + "ntusernumlogons", + "ntuserparms", + "ntuserpasswordexpired", + "ntuserprimarygroupid", + "ntuserpriv", + "ntuserprofile", + "ntuserscriptpath", + "ntuseruniqueid", + "ntuserunitsperweek", + "ntuserusrcomment", + "ntuserworkstations", + "numsubordinates", + "nxtrecord", "o", + "objectclass", + "objectclasses", + "objectclassmap", + "oid", + "oncrpcnumber", + "onewaysync", + "organizationalstatus", "ou", - "title", - "description", - "searchGuide", - "businessCategory", - "postalAddress", - "postalCode", - "postOfficeBox", - "physicalDeliveryOfficeName", - "nsAdminOneACLDir", - "ipNetworkNumber", - "ipNetmaskNumber", - "macAddress", - "bootParameter", - "bootFile", - "nisMapName", - "nisMapEntry", - "nsVendor", - "nisSecretkey", - "installationTimeStamp", - "nsSystemIndex", - "nsAccessLog", - "automountMapName", - "FTPuid", - "FTPgid", - "FTPDownloadBandwidth", - "FTPStatus", - "FTPDownloadRatio", - "FTPUploadBandwidth", - "dialupAccess", - "FTPUploadRatio", - "FTPQuotaFiles", - "javaCodebase", - "nsProductVersion", - "radiusClientShortName", - "ntUserDeleteAccount", - "ntGroupType", - "javaSerializedData", - "nsAdminGroupName", - "radiusClientSecret", - "nsAdminAccountInfo", - "accountUnlockTime", - "nsUserIDFormat", - "userSMIMECertificate", - "mgrpAllowedDomain", - "radiusNASIpAddress", - "mgrpAllowedBroadcaster", - "radiusReplyItem", - "sambaLockoutThreshold", - "vacationenddate", - "dNameRecord", - "nsDS5ReplicaHost", - "nsDS5ReplicaPort", - "nsRoleFilter", - "cosIndirectSpecifier", - "nsRole", - "nsRoleDN", - "nsConfigRoot", - "nsIdleTimeout", - "nsLookThroughLimit", - "nsSizeLimit", - "printer-info", - "printer-make-and-model", - "nsHardwarePlatform", - "printer-ipp-versions-supported", - "printer-multiple-document-jobs-supported", + "owner", + "pager", + "pamexcludesuffix", + "pamfallback", + "pamidattr", + "pamidmapmethod", + "pamincludesuffix", + "pammissingsuffix", + "pamsecure", + "pamservice", + "parentid", + "parentorganization", + "passwordallowchangetime", + "passwordchange", + "passwordchecksyntax", + "passwordexp", + "passwordexpirationtime", + "passwordexpwarned", + "passwordgracelimit", + "passwordgraceusertime", + "passwordhistory", + "passwordinhistory", + "passwordkeephistory", + "passwordlockout", + "passwordlockoutduration", + "passwordmaxage", + "passwordmaxfailure", + "passwordmaxrepeats", + "passwordmin8bit", + "passwordminage", + "passwordminalphas", + "passwordmincategories", + "passwordmindigits", + "passwordminlength", + "passwordminlowers", + "passwordminspecials", + "passwordmintokenlength", + "passwordminuppers", + "passwordmustchange", + "passwordresetduration", + "passwordresetfailurecount", + "passwordretrycount", + "passwordstoragescheme", + "passwordunlock", + "passwordwarning", + "personaltitle", + "photo", + "physicaldeliveryofficename", + "postaladdress", + "postalcode", + "postofficebox", + "preferreddeliverymethod", + "preferredlanguage", + "preferredlocale", + "preferredserverlist", + "preferredtimezone", + "printer-aliases", + "printer-charset-configured", "printer-charset-supported", + "printer-color-supported", + "printer-compression-supported", + "printer-copies-supported", + "printer-current-operator", + "printer-delivery-orientation-supported", "printer-document-format-supported", + "printer-finishings-supported", "printer-generated-natural-language-supported", + "printer-info", + "printer-ipp-versions-supported", + "printer-job-k-octets-supported", + "printer-job-priority-supported", "printer-location", - "printer-name", + "printer-make-and-model", + "printer-media-local-supported", + "printer-media-supported", "printer-more-info", - "shadowInactive", - "shadowWarning", - "dnQualifier", - "shadowLastChange", - "loginShell", - "shadowMax", - "shadowMin", - "gidNumber", - "uidNumber", - "homeDirectory", - "gecos", - "nsServerSecurity", - "generationQualifier", - "member", - "matchingRules", - "authorizedService", - "givenName", - "changeLogMaximumAge", - "sambaPwdMustChange", - "sambaPwdCanChange", - "mgrpNoDuplicateChecks", - "name", - "nsWellKnownJarfiles", - "changeLogMaximumSize", - "sambaPrimaryGroupSID", - "sambaNextGroupRid", - "sambaNextUserRid", - "nameForms", - "mgrpAddHeader", - "sambaAcctFlags", - "sambaNTPassword", - "sambaLMPassword", - "nsds7WindowsDomain", - "nsslapd-ldapiautodnsuffix", - "mozillaHomePostalCode", - "nsds7WindowsReplicaSubtree", - "nsds7DirectoryReplicaSubtree", - "nsds7NewWinUserSyncEnabled", - "nsds7NewWinGroupSyncEnabled", - "mozillaHomeStreet2", - "changeLogMaximumConcurrentWrites", - "radiusExpiration", - "nsSSL2Ciphers", - "vlvBase", - "nisNetIdUser", - "connection", - "nsDisplayName", - "nsMatchingRule", - "lastLoginTime", - "ntGroupCreateNewGroup", - "ntGroupDomainId", - "radiusClientNASType", - "ntGroupDeleteGroup", - "ntUserDomainId", - "radiusReplyMessage", - "subschemaSubentry", - "ntUserCreateNewAccount", - "replicaUpdateFailedAt", - "ntUserFlags", - "nsNickName", - "nsValueDefault", - "ipaSudoRunAsGroupCategory", - "mgrpMsgRejectText", - "nsds5debugreplicatimeout", - "sambaPasswordHistory", - "sudoCmd", - "nsGroupRDNComponent", - "nsViewConfiguration", - "nsds5replicaBusyWaitTime", - "vlvEnabled", - "winSyncInterval", - "nsds5replicaSessionPauseTime", - "radiusFramedIPXNetwork", - "distinguishedName", - "sambaSID", - "nsAdminCacheLifetime", - "createTimestamp", - "mgrpRFC822MailMember", - "mailEnhancedUniqueMember", - "mgrpMsgMaxSize", - "mgrpModerator", - "javaClassNames", - "changeLog", - "nsLicensedFor", - "nsLicenseStartTime", - "nsLicenseEndTime", - "preferredLanguage", - "creatorsName", - "nsAdminAccessHosts", - "houseIdentifier", - "supportedAlgorithms", - "deltaRevocationList", - "sudoRunAs", - "uniqueMember", - "sudoHost", - "sudoCommand", - "pamMissingSuffix", - "pamExcludeSuffix", - "pamIncludeSuffix", - "nsSaslMapFilterTemplate", - "nsSaslMapBaseDNTemplate", - "nsSaslMapRegexString", - "nsEncryptionAlgorithm", - "passwordMinAge", - "passwordResetFailureCount", - "nsDS5ReplicaAutoReferral", - "nsSNMPName", - "nsslapd-pluginType", - "nsslapd-pluginId", - "nsslapd-pluginPath", - "nsslapd-pluginInitfunc", - "nsslapd-pluginVersion", - "nsslapd-pluginVendor", - "nsServerMigrationClassname", - "serviceSearchDescriptor", - "mozillaCustom4", - "dereferenceAliases", - "mozillaCustom1", - "passwordLockout", - "defaultSearchScope", - "mozillaCustom2", - "passwordWarning", - "javaDoc", - "krbPwdServers", - "passwordMaxAge", - "javaReferenceAddress", - "passwordLockoutDuration", - "serialNumber", - "nsDirectoryURL", - "associatedName", - "nsBackendSuffix", - "associatedDomain", - "cirBeginORC", - "ttl", - "passwordExpirationTime", - "nsDefaultAcceptLanguage", - "oncRpcNumber", - "mozillaUseHtmlMail", - "mozillaSecondEmail", - "mozillaNickname", - "nsAccountLock", - "copyingFrom", - "nsBaseDN", - "LocRecord", - "aAAARecord", - "nsValueDescription", - "ldapSyntaxes", - "SigRecord", - "supportedSASLMechanisms", - "supportedLDAPVersion", - "supportedControl", - "nsBuildSecurity", - "radiusLoginLATGroup", - "radiusLoginIPHost", - "radiusIdleTimeout", - "radiusFramedRouting", - "radiusLoginService", - "radiusLoginLATService", - "radiusLoginLATPort", - "radiusLoginLATNode", - "radiusPasswordRetry", - "radiusLoginTCPPort", - "krbPwdMaxFailure", - "krbPwdFailureCountInterval", - "krbPwdLockoutDuration", - "calOtherCalAdrURIs", - "calOtherCAPURIs", - "calCalAdrURI", - "calCAPURI", - "calOtherFBURLs", - "calOtherCalURIs", - "multiLineDescription", - "nsPidLog", - "cirReplicaRoot", - "administratorContactInfo", - "adminUrl", - "serverHostName", - "krbSearchScope", - "serverRoot", - "serverProductName", - "serverVersionNumber", - "replicaCredentials", - "automountInformation", - "automountKey", - "numSubordinates", - "printer-job-k-octets-supported", - "nsBindDN", - "mXRecord", - "nsSSL3SessionTimeout", - "printer-current-operator", - "nsruvReplicaLastModified", - "krbAdmServers", - "nsErrorLog", - "nscpEntryDN", + "printer-multiple-document-jobs-supported", + "printer-name", "printer-natural-language-configured", - "nsViewFilter", - "krbPasswordExpiration", - "printer-copies-supported", - "nsSSLSupportedCiphers", - "namingContexts", - "altServer", - "supportedExtension", - "krbPrincipalKey", - "nsLogSuppress", - "nsState", - "nsUniqueId", - "ntUserUniqueId", - "ntUserLastLogon", - "nsParentUniqueId" + "printer-number-up-supported", + "printer-output-features-supported", + "printer-pages-per-minute", + "printer-pages-per-minute-color", + "printer-print-quality-supported", + "printer-resolution-supported", + "printer-service-person", + "printer-sides-supported", + "printer-stacking-order-supported", + "printer-uri", + "printer-xri-supported", + "profilettl", + "ptrrecord", + "pwdpolicysubentry", + "radiusarapfeatures", + "radiusarapsecurity", + "radiusarapzoneaccess", + "radiusauthtype", + "radiuscallbackid", + "radiuscallbacknumber", + "radiuscalledstationid", + "radiuscallingstationid", + "radiuscheckitem", + "radiusclass", + "radiusclientipaddress", + "radiusclientnastype", + "radiusclientsecret", + "radiusclientshortname", + "radiusexpiration", + "radiusfilterid", + "radiusframedappletalklink", + "radiusframedappletalknetwork", + "radiusframedappletalkzone", + "radiusframedcompression", + "radiusframedipaddress", + "radiusframedipnetmask", + "radiusframedipxnetwork", + "radiusframedmtu", + "radiusframedprotocol", + "radiusframedroute", + "radiusframedrouting", + "radiusgroupname", + "radiushint", + "radiushuntgroupname", + "radiusidletimeout", + "radiusloginiphost", + "radiusloginlatgroup", + "radiusloginlatnode", + "radiusloginlatport", + "radiusloginlatservice", + "radiusloginservice", + "radiuslogintcpport", + "radiuslogintime", + "radiusnasipaddress", + "radiuspasswordretry", + "radiusportlimit", + "radiusprofiledn", + "radiusprompt", + "radiusproxytorealm", + "radiusrealm", + "radiusreplicatetorealm", + "radiusreplyitem", + "radiusreplymessage", + "radiusservicetype", + "radiussessiontimeout", + "radiussimultaneoususe", + "radiusstripusername", + "radiusterminationaction", + "radiustunnelassignmentid", + "radiustunnelclientendpoint", + "radiustunnelmediumtype", + "radiustunnelpassword", + "radiustunnelpreference", + "radiustunnelprivategroupid", + "radiustunnelserverendpoint", + "radiustunneltype", + "radiususercategory", + "radiusvsa", + "ref", + "registeredaddress", + "replicaabandonedchanges", + "replicabeginorc", + "replicabinddn", + "replicabindmethod", + "replicacfupdated", + "replicacredentials", + "replicaentryfilter", + "replicahost", + "replicalastrelevantchange", + "replicanickname", + "replicaport", + "replicaroot", + "replicatedattributelist", + "replicaupdatefailedat", + "replicaupdatereplayed", + "replicaupdateschedule", + "replicausessl", + "retrycountresettime", + "roleoccupant", + "roomnumber", + "rrsigrecord", + "sabayonprofilename", + "sabayonprofileurl", + "sambaacctflags", + "sambaalgorithmicridbase", + "sambabadpasswordcount", + "sambabadpasswordtime", + "sambabooloption", + "sambadomainname", + "sambaforcelogoff", + "sambagrouptype", + "sambahomedrive", + "sambahomepath", + "sambaintegeroption", + "sambakickofftime", + "sambalmpassword", + "sambalockoutduration", + "sambalockoutobservationwindow", + "sambalockoutthreshold", + "sambalogofftime", + "sambalogonhours", + "sambalogonscript", + "sambalogontime", + "sambalogontochgpwd", + "sambamaxpwdage", + "sambaminpwdage", + "sambaminpwdlength", + "sambamungeddial", + "sambanextgrouprid", + "sambanextrid", + "sambanextuserrid", + "sambantpassword", + "sambaoptionname", + "sambapasswordhistory", + "sambaprimarygroupsid", + "sambaprofilepath", + "sambapwdcanchange", + "sambapwdhistorylength", + "sambapwdlastset", + "sambapwdmustchange", + "sambarefusemachinepwdchange", + "sambasharename", + "sambasid", + "sambasidlist", + "sambastringlistoption", + "sambastringoption", + "sambatrustflags", + "sambauserworkstations", + "searchguide", + "searchtimelimit", + "secretary", + "seealso", + "serialnumber", + "serverhostname", + "serverproductname", + "serverroot", + "serverversionnumber", + "serviceauthenticationmethod", + "servicecategory", + "servicecredentiallevel", + "servicesearchdescriptor", + "shadowexpire", + "shadowflag", + "shadowinactive", + "shadowlastchange", + "shadowmax", + "shadowmin", + "shadowwarning", + "sigrecord", + "sn", + "sourcehost", + "sourcehostcategory", + "srvrecord", + "sshfprecord", + "st", + "street", + "structuralobjectclass", + "subschemasubentry", + "subtreeaci", + "sudocmd", + "sudocommand", + "sudohost", + "sudooption", + "sudorunas", + "sudouser", + "supportedalgorithms", + "supportedcontrol", + "supportedextension", + "supportedfeatures", + "supportedldapversion", + "supportedsaslmechanisms", + "targetdn", + "telephonenumber", + "teletexterminalidentifier", + "telexnumber", + "title", + "trustmodel", + "ttl", + "txtrecord", + "uid", + "uidnumber", + "uniqueidentifier", + "uniquemember", + "usercategory", + "usercertificate", + "userclass", + "userpassword", + "userpkcs12", + "usersmimecertificate", + "vacationenddate", + "vacationstartdate", + "vendorname", + "vendorversion", + "vlvbase", + "vlvenabled", + "vlvfilter", + "vlvscope", + "vlvsort", + "vlvuses", + "winsyncinterval", + "x121address", + "x500uniqueidentifier" ], "attribute_members": {}, "bindable": false, @@ -1613,7 +1681,7 @@ "objectclass", "aci" ], - "label": "", + "label": "Entry", "methods": [ "add", "del", @@ -1634,6 +1702,23 @@ "parent_object": "", "primary_key": "cn", "rdn_attribute": "", + "relationships": { + "member": [ + "Member", + "", + "no_" + ], + "memberindirect": [ + "Indirect Member", + null, + "no_indirect_" + ], + "memberof": [ + "Parent", + "in_", + "not_in_" + ] + }, "takes_params": [ { "alwaysask": false, @@ -2185,37 +2270,37 @@ }, "dnsrecord": { "aciattrs": [ - "idnsName", - "objectClass", - "idnsAllowDynUpdate", - "cNAMERecord", - "rRSIGRecord", - "dSRecord", - "nSECRecord", + "a6record", + "aaaarecord", + "afsdbrecord", + "arecord", + "certrecord", "cn", - "sSHFPRecord", - "LocRecord", - "aAAARecord", - "KeyRecord", - "SigRecord", - "nSRecord", - "mXRecord", - "mDRecord", - "aRecord", - "dNSClass", - "dNSTTL", - "mInfoRecord", - "tXTRecord", - "pTRRecord", - "hInfoRecord", - "aFSDBRecord", - "a6Record", - "dNameRecord", - "sRVRecord", - "nXTRecord", - "kXRecord", - "certRecord", - "nAPTRRecord" + "cnamerecord", + "dnamerecord", + "dnsclass", + "dnsttl", + "dsrecord", + "hinforecord", + "idnsallowdynupdate", + "idnsname", + "keyrecord", + "kxrecord", + "locrecord", + "mdrecord", + "minforecord", + "mxrecord", + "naptrrecord", + "nsecrecord", + "nsrecord", + "nxtrecord", + "objectclass", + "ptrrecord", + "rrsigrecord", + "sigrecord", + "srvrecord", + "sshfprecord", + "txtrecord" ], "attribute_members": {}, "bindable": false, @@ -2285,6 +2370,23 @@ "parent_object": "dnszone", "primary_key": "idnsname", "rdn_attribute": "", + "relationships": { + "member": [ + "Member", + "", + "no_" + ], + "memberindirect": [ + "Indirect Member", + null, + "no_indirect_" + ], + "memberof": [ + "Parent", + "in_", + "not_in_" + ] + }, "takes_params": [ { "alwaysask": false, @@ -2367,46 +2469,46 @@ }, "dnszone": { "aciattrs": [ - "idnsSOAexpire", - "idnsSOAminimum", - "idnsSOArName", - "idnsSOAserial", - "idnsSOArefresh", - "idnsSOAretry", - "idnsName", - "idnsZoneActive", - "idnsSOAmName", - "objectClass", - "idnsAllowDynUpdate", - "cNAMERecord", - "idnsUpdatePolicy", - "rRSIGRecord", - "dSRecord", - "nSECRecord", + "a6record", + "aaaarecord", + "afsdbrecord", + "arecord", + "certrecord", "cn", - "sSHFPRecord", - "LocRecord", - "aAAARecord", - "KeyRecord", - "SigRecord", - "nSRecord", - "mXRecord", - "mDRecord", - "aRecord", - "dNSClass", - "dNSTTL", - "mInfoRecord", - "tXTRecord", - "pTRRecord", - "hInfoRecord", - "aFSDBRecord", - "a6Record", - "dNameRecord", - "sRVRecord", - "nXTRecord", - "kXRecord", - "certRecord", - "nAPTRRecord" + "cnamerecord", + "dnamerecord", + "dnsclass", + "dnsttl", + "dsrecord", + "hinforecord", + "idnsallowdynupdate", + "idnsname", + "idnssoaexpire", + "idnssoaminimum", + "idnssoamname", + "idnssoarefresh", + "idnssoaretry", + "idnssoarname", + "idnssoaserial", + "idnsupdatepolicy", + "idnszoneactive", + "keyrecord", + "kxrecord", + "locrecord", + "mdrecord", + "minforecord", + "mxrecord", + "naptrrecord", + "nsecrecord", + "nsrecord", + "nxtrecord", + "objectclass", + "ptrrecord", + "rrsigrecord", + "sigrecord", + "srvrecord", + "sshfprecord", + "txtrecord" ], "attribute_members": {}, "bindable": false, @@ -2486,6 +2588,23 @@ "parent_object": "", "primary_key": "idnsname", "rdn_attribute": "", + "relationships": { + "member": [ + "Member", + "", + "no_" + ], + "memberindirect": [ + "Indirect Member", + null, + "no_indirect_" + ], + "memberof": [ + "Parent", + "in_", + "not_in_" + ] + }, "takes_params": [ { "alwaysask": false, @@ -2778,23 +2897,92 @@ "query": false, "required": false, "type": "unicode" + }, + { + "alwaysask": false, + "attribute": true, + "autofill": true, + "class": "Flag", + "cli_name": "zone_active", + "cli_short_name": null, + "default": false, + "doc": "Is zone active?", + "exclude": null, + "falsehoods": [ + 0, + "0", + "false" + ], + "flags": [ + "no_update", + "no_create" + ], + "hint": null, + "include": null, + "label": "Active zone", + "multivalue": false, + "name": "idnszoneactive", + "primary_key": false, + "query": false, + "required": false, + "truths": [ + "1", + 1, + "true" + ], + "type": "bool" + }, + { + "alwaysask": false, + "attribute": true, + "autofill": true, + "class": "Flag", + "cli_name": "allow_dynupdate", + "cli_short_name": null, + "default": false, + "doc": "Allow dynamic update?", + "exclude": null, + "falsehoods": [ + 0, + "0", + "false" + ], + "flags": [], + "hint": null, + "include": null, + "label": "Dynamic update", + "multivalue": false, + "name": "idnsallowdynupdate", + "primary_key": false, + "query": false, + "required": true, + "truths": [ + "1", + 1, + "true" + ], + "type": "bool" } ], "uuid_attribute": "" }, "group": { "aciattrs": [ - "ipaUniqueID", + "businesscategory", "cn", - "objectClass", + "description", + "gidnumber", + "ipauniqueid", + "member", + "memberof", + "memberuid", + "mepmanagedby", "o", + "objectclass", "ou", - "seeAlso", - "description", "owner", - "businessCategory", - "member", - "memberOf" + "seealso", + "userpassword" ], "attribute_members": { "member": [ @@ -2848,6 +3036,23 @@ "parent_object": "", "primary_key": "cn", "rdn_attribute": "", + "relationships": { + "member": [ + "Member", + "", + "no_" + ], + "memberindirect": [ + "Indirect Member", + null, + "no_indirect_" + ], + "memberof": [ + "Parent", + "in_", + "not_in_" + ] + }, "takes_params": [ { "alwaysask": false, @@ -2929,21 +3134,21 @@ }, "hbac": { "aciattrs": [ - "ipaUniqueID", + "accessruletype", + "accesstime", "cn", - "accessRuleType", "description", - "serviceCategory", - "accessTime", - "memberService", - "sourceHost", - "externalHost", - "sourceHostCategory", - "hostCategory", - "ipaEnabledFlag", - "userCategory", - "memberHost", - "memberUser" + "externalhost", + "hostcategory", + "ipaenabledflag", + "ipauniqueid", + "memberhost", + "memberservice", + "memberuser", + "servicecategory", + "sourcehost", + "sourcehostcategory", + "usercategory" ], "attribute_members": { "memberhost": [ @@ -3014,6 +3219,23 @@ "parent_object": "", "primary_key": "cn", "rdn_attribute": "ipauniqueid", + "relationships": { + "member": [ + "Member", + "", + "no_" + ], + "memberindirect": [ + "Indirect Member", + null, + "no_indirect_" + ], + "memberof": [ + "Parent", + "in_", + "not_in_" + ] + }, "takes_params": [ { "alwaysask": false, @@ -3438,11 +3660,11 @@ }, "hbacsvc": { "aciattrs": [ - "ipaUniqueID", "cn", - "objectClass", "description", - "memberOf" + "ipauniqueid", + "memberof", + "objectclass" ], "attribute_members": {}, "bindable": false, @@ -3475,6 +3697,23 @@ "parent_object": "", "primary_key": "cn", "rdn_attribute": "", + "relationships": { + "member": [ + "Member", + "", + "no_" + ], + "memberindirect": [ + "Indirect Member", + null, + "no_indirect_" + ], + "memberof": [ + "Parent", + "in_", + "not_in_" + ] + }, "takes_params": [ { "alwaysask": false, @@ -3533,16 +3772,16 @@ }, "hbacsvcgroup": { "aciattrs": [ - "ipaUniqueID", + "businesscategory", "cn", - "objectClass", + "description", + "ipauniqueid", + "member", "o", + "objectclass", "ou", - "seeAlso", - "description", "owner", - "businessCategory", - "member" + "seealso" ], "attribute_members": { "member": [ @@ -3581,6 +3820,23 @@ "parent_object": "", "primary_key": "cn", "rdn_attribute": "", + "relationships": { + "member": [ + "Member", + "", + "no_" + ], + "memberindirect": [ + "Indirect Member", + null, + "no_indirect_" + ], + "memberof": [ + "Parent", + "in_", + "not_in_" + ] + }, "takes_params": [ { "alwaysask": false, @@ -3639,22 +3895,22 @@ }, "host": { "aciattrs": [ - "ipaUniqueID", - "objectClass", "cn", - "fqdn", - "userCertificate", "description", - "managedBy", - "nsHardwarePlatform", + "enrolledby", + "fqdn", + "ipaclientversion", + "ipauniqueid", "l", - "serverHostName", - "memberOf", - "nsHostLocation", - "userPassword", - "ipaClientVersion", - "enrolledBy", - "nsOsVersion" + "managedby", + "memberof", + "nshardwareplatform", + "nshostlocation", + "nsosversion", + "objectclass", + "serverhostname", + "usercertificate", + "userpassword" ], "attribute_members": { "enrolledby": [ @@ -3713,6 +3969,23 @@ "parent_object": "", "primary_key": "fqdn", "rdn_attribute": "", + "relationships": { + "enrolledby": [ + "Enrolled by", + "enroll_by_", + "not_enroll_by_" + ], + "managedby": [ + "Managed by", + "man_by_", + "not_man_by_" + ], + "memberof": [ + "Parent", + "in_", + "not_in_" + ] + }, "takes_params": [ { "alwaysask": false, @@ -4020,17 +4293,17 @@ }, "hostgroup": { "aciattrs": [ - "ipaUniqueID", + "businesscategory", "cn", - "objectClass", + "description", + "ipauniqueid", + "member", + "memberof", "o", + "objectclass", "ou", - "seeAlso", - "description", "owner", - "businessCategory", - "member", - "memberOf" + "seealso" ], "attribute_members": { "member": [ @@ -4079,6 +4352,23 @@ "parent_object": "", "primary_key": "cn", "rdn_attribute": "", + "relationships": { + "member": [ + "Member", + "", + "no_" + ], + "memberindirect": [ + "Indirect Member", + null, + "no_indirect_" + ], + "memberof": [ + "Parent", + "in_", + "not_in_" + ] + }, "takes_params": [ { "alwaysask": false, @@ -4139,7 +4429,7 @@ "aciattrs": [], "attribute_members": {}, "bindable": false, - "container_dn": "cn=AYOUNG.BOSTON.DEVEL.REDHAT.COM,cn=kerberos", + "container_dn": "cn=IPA14.AYOUNG.BOSTON.DEVEL.REDHAT.COM,cn=kerberos", "default_attributes": [ "krbmaxticketlife", "krbmaxrenewableage" @@ -4162,6 +4452,23 @@ "parent_object": "", "primary_key": "uid", "rdn_attribute": "", + "relationships": { + "member": [ + "Member", + "", + "no_" + ], + "memberindirect": [ + "Indirect Member", + null, + "no_indirect_" + ], + "memberof": [ + "Parent", + "in_", + "not_in_" + ] + }, "takes_params": [ { "alwaysask": false, @@ -4240,18 +4547,18 @@ }, "netgroup": { "aciattrs": [ - "ipaUniqueID", "cn", "description", + "externalhost", + "hostcategory", + "ipaenabledflag", + "ipauniqueid", "member", - "nisDomainName", - "memberOf", - "externalHost", - "hostCategory", - "ipaEnabledFlag", - "userCategory", - "memberHost", - "memberUser" + "memberhost", + "memberof", + "memberuser", + "nisdomainname", + "usercategory" ], "attribute_members": { "member": [ @@ -4313,6 +4620,33 @@ "parent_object": "", "primary_key": "cn", "rdn_attribute": "ipauniqueid", + "relationships": { + "member": [ + "Member", + "", + "no_" + ], + "memberhost": [ + "Member", + "", + "no_" + ], + "memberindirect": [ + "Indirect Member", + null, + "no_indirect_" + ], + "memberof": [ + "Parent", + "in_", + "not_in_" + ], + "memberuser": [ + "Member", + "", + "no_" + ] + }, "takes_params": [ { "alwaysask": false, @@ -4474,15 +4808,15 @@ }, "permission": { "aciattrs": [ + "businesscategory", "cn", - "objectClass", + "description", + "member", "o", + "objectclass", "ou", - "seeAlso", - "description", "owner", - "businessCategory", - "member" + "seealso" ], "attribute_members": { "member": [ @@ -4522,6 +4856,23 @@ "parent_object": "", "primary_key": "cn", "rdn_attribute": "", + "relationships": { + "member": [ + "Member", + "", + "no_" + ], + "memberindirect": [ + "Indirect Member", + null, + "no_indirect_" + ], + "memberof": [ + "Parent", + "in_", + "not_in_" + ] + }, "takes_params": [ { "alwaysask": false, @@ -4647,7 +4998,8 @@ "host", "service", "hostgroup", - "netgroup" + "netgroup", + "dns" ] }, { @@ -4762,16 +5114,16 @@ }, "privilege": { "aciattrs": [ + "businesscategory", "cn", - "objectClass", + "description", + "member", + "memberof", "o", + "objectclass", "ou", - "seeAlso", - "description", "owner", - "businessCategory", - "member", - "memberOf" + "seealso" ], "attribute_members": { "member": [ @@ -4818,6 +5170,23 @@ "parent_object": "", "primary_key": "cn", "rdn_attribute": "", + "relationships": { + "member": [ + "Member", + "", + "no_" + ], + "memberindirect": [ + "Indirect Member", + null, + "no_indirect_" + ], + "memberof": [ + "Parent", + "in_", + "not_in_" + ] + }, "takes_params": [ { "alwaysask": false, @@ -4877,19 +5246,19 @@ "pwpolicy": { "aciattrs": [ "cn", - "objectClass", - "krbPwdMaxFailure", - "krbPwdFailureCountInterval", - "krbPwdLockoutDuration", - "krbPwdMinDiffChars", - "krbPwdMinLength", - "krbMaxPwdLife", - "krbMinPwdLife", - "krbPwdHistoryLength" + "krbmaxpwdlife", + "krbminpwdlife", + "krbpwdfailurecountinterval", + "krbpwdhistorylength", + "krbpwdlockoutduration", + "krbpwdmaxfailure", + "krbpwdmindiffchars", + "krbpwdminlength", + "objectclass" ], "attribute_members": {}, "bindable": false, - "container_dn": "cn=AYOUNG.BOSTON.DEVEL.REDHAT.COM,cn=kerberos", + "container_dn": "cn=IPA14.AYOUNG.BOSTON.DEVEL.REDHAT.COM,cn=kerberos", "default_attributes": [ "cn", "cospriority", @@ -4926,6 +5295,23 @@ "parent_object": "", "primary_key": "cn", "rdn_attribute": "", + "relationships": { + "member": [ + "Member", + "", + "no_" + ], + "memberindirect": [ + "Indirect Member", + null, + "no_indirect_" + ], + "memberof": [ + "Parent", + "in_", + "not_in_" + ] + }, "takes_params": [ { "alwaysask": false, @@ -5090,22 +5476,91 @@ "query": false, "required": true, "type": "int" + }, + { + "alwaysask": false, + "attribute": false, + "autofill": false, + "class": "Int", + "cli_name": "maxfail", + "cli_short_name": null, + "default": null, + "doc": "Consecutive failures before lockout", + "exclude": null, + "flags": [], + "hint": null, + "include": null, + "label": "Max failures", + "maxvalue": null, + "minvalue": 0, + "multivalue": false, + "name": "krbpwdmaxfailure", + "primary_key": false, + "query": false, + "required": false, + "type": "int" + }, + { + "alwaysask": false, + "attribute": false, + "autofill": false, + "class": "Int", + "cli_name": "failinterval", + "cli_short_name": null, + "default": null, + "doc": "Period after which failure count will be reset (seconds)", + "exclude": null, + "flags": [], + "hint": null, + "include": null, + "label": "Failure reset interval", + "maxvalue": null, + "minvalue": 0, + "multivalue": false, + "name": "krbpwdfailurecountinterval", + "primary_key": false, + "query": false, + "required": false, + "type": "int" + }, + { + "alwaysask": false, + "attribute": false, + "autofill": false, + "class": "Int", + "cli_name": "lockouttime", + "cli_short_name": null, + "default": null, + "doc": "Period for which lockout is enforced (seconds)", + "exclude": null, + "flags": [], + "hint": null, + "include": null, + "label": "Lockout duration", + "maxvalue": null, + "minvalue": 0, + "multivalue": false, + "name": "krbpwdlockoutduration", + "primary_key": false, + "query": false, + "required": false, + "type": "int" } ], "uuid_attribute": "" }, "role": { "aciattrs": [ + "businesscategory", "cn", - "objectClass", + "description", + "member", + "memberof", "o", + "objectclass", "ou", - "seeAlso", - "description", "owner", - "businessCategory", - "member", - "memberOf" + "seealso" ], "attribute_members": { "member": [ @@ -5154,6 +5609,23 @@ "parent_object": "", "primary_key": "cn", "rdn_attribute": "", + "relationships": { + "member": [ + "Member", + "", + "no_" + ], + "memberindirect": [ + "Indirect Member", + null, + "no_indirect_" + ], + "memberof": [ + "Parent", + "in_", + "not_in_" + ] + }, "takes_params": [ { "alwaysask": false, @@ -5305,31 +5777,31 @@ }, "service": { "aciattrs": [ - "ipaUniqueID", - "krbPrincipalName", - "objectClass", - "krbObjectReferences", - "krbPrincipalExpiration", - "krbLoginFailedCount", - "krbExtraData", - "krbCanonicalName", - "userCertificate", - "krbTicketFlags", - "krbPwdPolicyReference", - "managedBy", - "krbLastPwdChange", - "krbPwdHistory", - "krbMaxRenewableAge", - "memberOf", - "krbPasswordExpiration", - "krbLastFailedAuth", - "krbLastSuccessfulAuth", - "krbUPEnabled", - "krbPrincipalKey", - "krbPrincipalType", - "krbTicketPolicyReference", - "krbPrincipalAliases", - "krbMaxTicketLife" + "ipauniqueid", + "krbcanonicalname", + "krbextradata", + "krblastfailedauth", + "krblastpwdchange", + "krblastsuccessfulauth", + "krbloginfailedcount", + "krbmaxrenewableage", + "krbmaxticketlife", + "krbobjectreferences", + "krbpasswordexpiration", + "krbprincipalaliases", + "krbprincipalexpiration", + "krbprincipalkey", + "krbprincipalname", + "krbprincipaltype", + "krbpwdhistory", + "krbpwdpolicyreference", + "krbticketflags", + "krbticketpolicyreference", + "krbupenabled", + "managedby", + "memberof", + "objectclass", + "usercertificate" ], "attribute_members": { "managedby": [ @@ -5374,6 +5846,23 @@ "parent_object": "", "primary_key": "krbprincipalname", "rdn_attribute": "", + "relationships": { + "member": [ + "Member", + "", + "no_" + ], + "memberindirect": [ + "Indirect Member", + null, + "no_indirect_" + ], + "memberof": [ + "Parent", + "in_", + "not_in_" + ] + }, "takes_params": [ { "alwaysask": false, @@ -5432,11 +5921,11 @@ }, "sudocmd": { "aciattrs": [ - "ipaUniqueID", - "sudoCmd", - "objectClass", "description", - "memberOf" + "ipauniqueid", + "memberof", + "objectclass", + "sudocmd" ], "attribute_members": {}, "bindable": false, @@ -5468,6 +5957,23 @@ "parent_object": "", "primary_key": "sudocmd", "rdn_attribute": "", + "relationships": { + "member": [ + "Member", + "", + "no_" + ], + "memberindirect": [ + "Indirect Member", + null, + "no_indirect_" + ], + "memberof": [ + "Parent", + "in_", + "not_in_" + ] + }, "takes_params": [ { "alwaysask": false, @@ -5526,16 +6032,16 @@ }, "sudocmdgroup": { "aciattrs": [ - "ipaUniqueID", + "businesscategory", "cn", - "objectClass", + "description", + "ipauniqueid", + "member", "o", + "objectclass", "ou", - "seeAlso", - "description", "owner", - "businessCategory", - "member" + "seealso" ], "attribute_members": { "member": [ @@ -5584,6 +6090,23 @@ "parent_object": "", "primary_key": "cn", "rdn_attribute": "", + "relationships": { + "member": [ + "Member", + "", + "no_" + ], + "memberindirect": [ + "Indirect Member", + null, + "no_indirect_" + ], + "memberof": [ + "Parent", + "in_", + "not_in_" + ] + }, "takes_params": [ { "alwaysask": false, @@ -5702,27 +6225,27 @@ }, "sudorule": { "aciattrs": [ - "ipaUniqueID", + "cmdcategory", "cn", - "ipaSudoOpt", "description", - "cmdCategory", - "ipaSudoRunAsGroupCategory", - "memberDenyCmd", - "externalHost", - "hostMask", - "ipaSudoRunAsExtGroup", - "hostCategory", - "ipaEnabledFlag", - "ipaSudoRunAsUserCategory", - "ipaSudoRunAsGroup", - "ipaSudoRunAs", - "ipaSudoRunAsExtUser", - "externalUser", - "memberAllowCmd", - "userCategory", - "memberHost", - "memberUser" + "externalhost", + "externaluser", + "hostcategory", + "hostmask", + "ipaenabledflag", + "ipasudoopt", + "ipasudorunas", + "ipasudorunasextgroup", + "ipasudorunasextuser", + "ipasudorunasgroup", + "ipasudorunasgroupcategory", + "ipasudorunasusercategory", + "ipauniqueid", + "memberallowcmd", + "memberdenycmd", + "memberhost", + "memberuser", + "usercategory" ], "attribute_members": { "ipasudorunas": [ @@ -5772,6 +6295,7 @@ "add_allow_command", "add_deny_command", "add_host", + "add_option", "add_runasgroup", "add_runasuser", "add_user", @@ -5783,6 +6307,7 @@ "remove_allow_command", "remove_deny_command", "remove_host", + "remove_option", "remove_runasgroup", "remove_runasuser", "remove_user", @@ -5799,6 +6324,23 @@ "parent_object": "", "primary_key": "cn", "rdn_attribute": "ipauniqueid", + "relationships": { + "member": [ + "Member", + "", + "no_" + ], + "memberindirect": [ + "Indirect Member", + null, + "no_indirect_" + ], + "memberof": [ + "Parent", + "in_", + "not_in_" + ] + }, "takes_params": [ { "alwaysask": false, @@ -6276,91 +6818,118 @@ "query": false, "required": false, "type": "unicode" + }, + { + "alwaysask": false, + "attribute": false, + "autofill": false, + "class": "Str", + "cli_name": "externaluser", + "cli_short_name": null, + "default": null, + "doc": "External User the rule applies to", + "exclude": null, + "flags": [], + "hint": null, + "include": null, + "label": "External User", + "length": null, + "maxlength": null, + "minlength": null, + "multivalue": false, + "name": "externaluser", + "pattern": null, + "pattern_errmsg": null, + "primary_key": false, + "query": false, + "required": false, + "type": "unicode" } ], "uuid_attribute": "ipauniqueid" }, "user": { "aciattrs": [ - "sn", + "audio", + "businesscategory", + "carlicense", "cn", - "objectClass", - "uid", - "ipaUniqueID", - "gidNumber", - "uidNumber", - "homeDirectory", - "manager", - "userCertificate", - "homePostalAddress", - "krbLoginFailedCount", - "krbLastSuccessfulAuth", - "title", - "userSMIMECertificate", - "krbPrincipalExpiration", - "roomNumber", - "photo", + "departmentnumber", "description", - "krbPrincipalName", - "mail", - "employeeType", - "krbPwdHistory", - "carLicense", - "departmentNumber", - "employeeNumber", - "inetUserHttpURL", - "memberOf", - "displayName", - "st", - "street", + "destinationindicator", + "displayname", + "employeenumber", + "employeetype", + "facsimiletelephonenumber", + "gecos", + "gidnumber", + "givenname", + "homedirectory", + "homephone", + "homepostaladdress", + "inetuserhttpurl", + "inetuserstatus", + "initials", + "internationalisdnnumber", + "ipauniqueid", + "jpegphoto", + "krbcanonicalname", + "krbextradata", + "krblastfailedauth", + "krblastpwdchange", + "krblastsuccessfulauth", + "krbloginfailedcount", + "krbmaxrenewableage", + "krbmaxticketlife", + "krbpasswordexpiration", + "krbprincipalaliases", + "krbprincipalexpiration", + "krbprincipalkey", + "krbprincipalname", + "krbprincipaltype", + "krbpwdhistory", + "krbpwdpolicyreference", + "krbticketflags", + "krbticketpolicyreference", + "krbupenabled", "l", - "krbMaxRenewableAge", - "jpegPhoto", - "audio", - "pager", - "secretary", - "preferredLanguage", - "krbExtraData", - "krbCanonicalName", + "labeleduri", + "loginshell", + "mail", + "manager", + "memberof", + "mepmanagedentry", + "mobile", "o", + "objectclass", "ou", - "seeAlso", - "userPassword", - "businessCategory", - "postalAddress", - "postalCode", - "postOfficeBox", - "physicalDeliveryOfficeName", - "mobile", - "krbPwdPolicyReference", - "labeledURI", - "homePhone", - "krbPasswordExpiration", - "inetUserStatus", - "krbLastPwdChange", - "krbMaxTicketLife", - "krbUPEnabled", - "loginShell", - "x500UniqueIdentifier", - "krbLastFailedAuth", - "gecos", - "krbPrincipalKey", - "krbTicketFlags", - "krbPrincipalType", - "userPKCS12", - "initials", - "krbTicketPolicyReference", - "givenName", - "preferredDeliveryMethod", - "krbPrincipalAliases", - "telexNumber", - "telephoneNumber", - "facsimileTelephoneNumber", - "teletexTerminalIdentifier", - "internationalISDNNumber", - "x121Address", - "destinationIndicator", - "registeredAddress" + "pager", + "photo", + "physicaldeliveryofficename", + "postaladdress", + "postalcode", + "postofficebox", + "preferreddeliverymethod", + "preferredlanguage", + "registeredaddress", + "roomnumber", + "secretary", + "seealso", + "sn", + "st", + "street", + "telephonenumber", + "teletexterminalidentifier", + "telexnumber", + "title", + "uid", + "uidnumber", + "usercertificate", + "userpassword", + "userpkcs12", + "usersmimecertificate", + "x121address", + "x500uniqueidentifier" ], "attribute_members": { "memberof": [ @@ -6407,6 +6976,23 @@ "parent_object": "", "primary_key": "uid", "rdn_attribute": "", + "relationships": { + "member": [ + "Member", + "", + "no_" + ], + "memberindirect": [ + "Indirect Member", + null, + "no_indirect_" + ], + "memberof": [ + "Parent", + "in_", + "not_in_" + ] + }, "takes_params": [ { "alwaysask": false, @@ -6652,7 +7238,9 @@ "default": null, "doc": "Kerberos principal", "exclude": null, - "flags": [], + "flags": [ + "no_update" + ], "hint": null, "include": null, "label": "Kerberos principal", @@ -6737,7 +7325,7 @@ "include": null, "label": "UID", "maxvalue": null, - "minvalue": null, + "minvalue": 1, "multivalue": false, "name": "uidnumber", "primary_key": false, @@ -7085,7 +7673,7 @@ "cli_name": "nsaccountlock", "cli_short_name": null, "default": null, - "doc": "Account disabled", + "doc": "Account activation status", "exclude": null, "falsehoods": [ 0, @@ -7099,7 +7687,7 @@ ], "hint": null, "include": null, - "label": "Account disabled", + "label": "Account activation status", "multivalue": false, "name": "nsaccountlock", "primary_key": false, @@ -7164,36 +7752,40 @@ "cn": [ "Administrator" ], - "dn": "uid=admin,cn=users,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com", + "dn": "uid=admin,cn=users,cn=accounts,dc=ipa14,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com", "gecos": [ "Administrator" ], "gidnumber": [ - "66000000" + "1342000000" ], "homedirectory": [ "/home/admin" ], "ipauniqueid": [ - "c9e61ada-0703-11e0-addd-525400674dcd" + "f69bd094-1822-11e0-9b8f-52540029a798" ], "krblastpwdchange": [ - "20101213215751Z" + "20110104165354Z" + ], + "krblastsuccessfulauth": [ + "20110105032257Z" ], "krbpasswordexpiration": [ - "20110313215751Z" + "20110404165354Z" ], "krbprincipalname": [ - "admin@AYOUNG.BOSTON.DEVEL.REDHAT.COM" + "admin@IPA14.AYOUNG.BOSTON.DEVEL.REDHAT.COM" ], "loginshell": [ "/bin/bash" ], "memberof_group": [ - "admins" + "admins", + "testgroup" ], "mepmanagedentry": [ - "cn=admin,cn=groups,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com" + "cn=admin,cn=groups,cn=accounts,dc=ipa14,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com" ], "nsaccountlock": [ "False" @@ -7215,7 +7807,7 @@ "admin" ], "uidnumber": [ - "66000000" + "1342000000" ] } ], @@ -7223,18 +7815,18 @@ "truncated": false }, { - "count": 68, + "count": 65, "error": null, "result": { - "basedn": "dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com", - "bin": "/home/ayoung/devel/freeipa", + "basedn": "dc=ipa14,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com", + "bin": "/var/www", "ca_agent_port": 9443, "ca_ee_port": 9444, - "ca_host": "ipa.ayoung.boston.devel.redhat.com", + "ca_host": "ipa14.ayoung.boston.devel.redhat.com", "ca_port": 9180, - "conf": "/root/.ipa/lite.conf", - "conf_default": "/root/.ipa/default.conf", - "confdir": "/root/.ipa", + "conf": "/etc/ipa/server.conf", + "conf_default": "/etc/ipa/default.conf", + "confdir": "/etc/ipa", "config_loaded": true, "container_accounts": "cn=accounts", "container_applications": "cn=applications,cn=configs,cn=policies", @@ -7261,43 +7853,40 @@ "container_sudorule": "cn=sudorules", "container_user": "cn=users,cn=accounts", "container_virtual": "cn=virtual operations", - "context": "lite", + "context": "server", "debug": false, "domain": "ayoung.boston.devel.redhat.com", - "dot_ipa": "/root/.ipa", + "dot_ipa": "/var/www/.ipa", "enable_ra": true, "fallback": true, - "home": "/root", - "host": "ipa.ayoung.boston.devel.redhat.com", + "home": "/var/www", + "host": "ipa14.ayoung.boston.devel.redhat.com", "in_server": true, - "in_tree": true, + "in_tree": false, "interactive": true, - "ipalib": "/home/ayoung/devel/freeipa/ipalib", - "ldap_uri": "ldapi://%2fvar%2frun%2fslapd-AYOUNG-BOSTON-DEVEL-REDHAT-COM.socket", - "lite_host": "127.0.0.1", - "lite_pem": "/root/.ipa/lite.pem", - "lite_port": 8888, - "log": "/root/.ipa/log/lite.log", - "logdir": "/root/.ipa/log", + "ipalib": "/usr/lib/python2.7/site-packages/ipalib", + "ldap_uri": "ldapi://%2fvar%2frun%2fslapd-IPA14-AYOUNG-BOSTON-DEVEL-REDHAT-COM.socket", + "log": null, + "logdir": "/var/log/ipa", "mode": "production", "mount_ipa": "/ipa/", "mount_jsonserver": "json", "mount_xmlserver": "xml", "prompt_all": false, "ra_plugin": "selfsign", - "realm": "AYOUNG.BOSTON.DEVEL.REDHAT.COM", + "realm": "IPA14.AYOUNG.BOSTON.DEVEL.REDHAT.COM", "rpc_json_uri": "http://localhost:8888/ipa/json", - "script": "/home/ayoung/devel/freeipa/lite-server.py", - "site_packages": "/home/ayoung/devel/freeipa", - "startup_traceback": true, + "script": "/var/www/mod_wsgi", + "site_packages": "/usr/lib/python2.7/site-packages", + "startup_traceback": false, "verbose": 0, "webui_assets_dir": null, "webui_prod": true, - "xmlrpc_uri": "http://localhost:8888/ipa/xml" + "xmlrpc_uri": "https://ipa14.ayoung.boston.devel.redhat.com/ipa/xml" }, - "summary": "68 variables", - "total": 68 + "summary": "65 variables", + "total": 65 } ] } -} +} \ No newline at end of file diff --git a/install/static/test/data/krbtpolicy_show.json b/install/static/test/data/krbtpolicy_show.json index bcba83da6..39882e14a 100644 --- a/install/static/test/data/krbtpolicy_show.json +++ b/install/static/test/data/krbtpolicy_show.json @@ -1,17 +1,78 @@ { - "error": null, - "id": 6, + "error": null, + "id": 6, "result": { "result": { - "dn": "cn=ayoung.boston.devel.redhat.com,cn=kerberos,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com", + "aci": [ + "(targetattr = \"krbMKey\")(version 3.0; acl \"No external access\"; deny (read,write,search,compare) userdn != \"ldap:///uid=kdc,cn=sysaccounts,cn=etc,dc=ipa14,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com\";)" + ], + "attributelevelrights": { + "aci": "rscwo", + "cn": "rscwo", + "krbadmservers": "rscwo", + "krbdefaultencsalttypes": "rscwo", + "krbkdcservers": "rscwo", + "krbldapservers": "rscwo", + "krbmaxrenewableage": "rscwo", + "krbmaxticketlife": "rscwo", + "krbmkey": "none", + "krbprinccontainerref": "rscwo", + "krbprincnamingattr": "rscwo", + "krbpwdpolicyreference": "rsc", + "krbpwdservers": "rscwo", + "krbsearchscope": "rscwo", + "krbsubtrees": "rscwo", + "krbsupportedencsalttypes": "rscwo", + "krbticketflags": "rsc", + "krbticketpolicyreference": "rsc", + "krbupenabled": "rsc", + "nsaccountlock": "rscwo", + "objectclass": "rscwo" + }, + "cn": [ + "IPA14.AYOUNG.BOSTON.DEVEL.REDHAT.COM" + ], + "dn": "cn=ipa14.ayoung.boston.devel.redhat.com,cn=kerberos,dc=ipa14,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com", + "krbdefaultencsalttypes": [ + "aes256-cts:special", + "aes128-cts:special", + "des3-hmac-sha1:special", + "arcfour-hmac:special" + ], "krbmaxrenewableage": [ "604800" - ], + ], "krbmaxticketlife": [ "86400" + ], + "krbsearchscope": [ + "2" + ], + "krbsubtrees": [ + "dc=ipa14,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com" + ], + "krbsupportedencsalttypes": [ + "aes256-cts:normal", + "aes256-cts:special", + "aes128-cts:normal", + "aes128-cts:special", + "des3-hmac-sha1:normal", + "des3-hmac-sha1:special", + "arcfour-hmac:normal", + "arcfour-hmac:special", + "des-hmac-sha1:normal", + "des-cbc-md5:normal", + "des-cbc-crc:normal", + "des-cbc-crc:v4", + "des-cbc-crc:afs3" + ], + "objectclass": [ + "top", + "krbrealmcontainer", + "krbticketpolicyaux" ] - }, - "summary": null, + }, + "summary": null, "value": "" } } \ No newline at end of file diff --git a/install/static/test/data/pwpolicy_mod.json b/install/static/test/data/pwpolicy_mod.json new file mode 100644 index 000000000..44d589519 --- /dev/null +++ b/install/static/test/data/pwpolicy_mod.json @@ -0,0 +1,56 @@ +{ + "error": null, + "id": 3, + "result": { + "result": { + "attributelevelrights": { + "aci": "rscwo", + "cn": "rscwo", + "krbmaxpwdlife": "rscwo", + "krbminpwdlife": "rscwo", + "krbpwdfailurecountinterval": "rscwo", + "krbpwdhistorylength": "rscwo", + "krbpwdlockoutduration": "rscwo", + "krbpwdmaxfailure": "rscwo", + "krbpwdmindiffchars": "rscwo", + "krbpwdminlength": "rscwo", + "nsaccountlock": "rscwo", + "objectclass": "rscwo" + }, + "cn": [ + "global_policy" + ], + "krbmaxpwdlife": [ + "90" + ], + "krbminpwdlife": [ + "1" + ], + "krbpwdfailurecountinterval": [ + "60" + ], + "krbpwdhistorylength": [ + "0" + ], + "krbpwdlockoutduration": [ + "10" + ], + "krbpwdmaxfailure": [ + "3" + ], + "krbpwdmindiffchars": [ + "0" + ], + "krbpwdminlength": [ + "8" + ], + "objectclass": [ + "top", + "nsContainer", + "krbPwdPolicy" + ] + }, + "summary": null, + "value": "global_policy" + } +} \ No newline at end of file diff --git a/install/static/test/data/pwpolicy_show.json b/install/static/test/data/pwpolicy_show.json index 69b77b0f4..e91f52efa 100644 --- a/install/static/test/data/pwpolicy_show.json +++ b/install/static/test/data/pwpolicy_show.json @@ -1,27 +1,57 @@ { - "error": null, - "id": 6, + "error": null, + "id": 8, "result": { "result": { - "cn": "GLOBAL", - "dn": "cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com", + "attributelevelrights": { + "aci": "rscwo", + "cn": "rscwo", + "krbmaxpwdlife": "rscwo", + "krbminpwdlife": "rscwo", + "krbpwdfailurecountinterval": "rscwo", + "krbpwdhistorylength": "rscwo", + "krbpwdlockoutduration": "rscwo", + "krbpwdmaxfailure": "rscwo", + "krbpwdmindiffchars": "rscwo", + "krbpwdminlength": "rscwo", + "nsaccountlock": "rscwo", + "objectclass": "rscwo" + }, + "cn": [ + "global_policy" + ], + "dn": "cn=global_policy,cn=ipa14.ayoung.boston.devel.redhat.com,cn=kerberos,dc=ipa14,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com", "krbmaxpwdlife": [ "90" - ], + ], "krbminpwdlife": [ "1" - ], + ], + "krbpwdfailurecountinterval": [ + "60" + ], "krbpwdhistorylength": [ "0" - ], + ], + "krbpwdlockoutduration": [ + "10" + ], + "krbpwdmaxfailure": [ + "3" + ], "krbpwdmindiffchars": [ "0" - ], + ], "krbpwdminlength": [ "8" + ], + "objectclass": [ + "top", + "nsContainer", + "krbPwdPolicy" ] - }, - "summary": null, - "value": "" + }, + "summary": null, + "value": "global_policy" } } \ No newline at end of file -- cgit