freeipa.git/install/share/Makefile.am, branch navigation

Create default disabled sudo bind user

2011-02-23T20:32:24+00:00

Read access is denied to the sudo container for unauthenticated users.
This shared user can be used to provide authenticated access to the
sudo information.

https://fedorahosted.org/freeipa/ticket/998

Allow SASL/EXTERNAL authentication for the root user

2011-01-20T20:49:30+00:00

This gives the root user low privileges so that when anonymous searches are
denied the init scripts can still search the directory via ldapi to get the
list of serevices to start.

Fixes: https://fedorahosted.org/freeipa/ticket/795

Remove radius options completely.

2011-01-14T19:06:56+00:00

This has been completely abandoned since ipa v1 and is not built by default.
Instead of carrying dead weight, let's remove it for now.

Fixes: https://fedorahosted.org/freeipa/ticket/761

Add replication related acis to all replicas

2010-12-21T22:28:13+00:00

Fixes: https://fedorahosted.org/freeipa/ticket/617

managed entry hostgroup netgroup support https://fedorahosted.org/freeipa/ticket/543

2010-12-13T22:56:12+00:00

Enable EntryUSN plugin by default, with global scope

2010-11-30T23:26:40+00:00

This will allow clients to use entryusn values to track what changed in the
directory regardles of replication delays.

Fixes: https://fedorahosted.org/freeipa/ticket/526

Autotune directory server to use a greater number of files

2010-11-22T17:42:16+00:00

This changes the system limits for the dirsrv user as well as
configuring DS to allow by default 8192 max files and 64 reserved
files (for replication indexes, etc..).

Fixes: https://fedorahosted.org/freeipa/ticket/464

id ranges: change DNA configuration

2010-11-22T17:42:16+00:00

Change the way we specify the id ranges to force uid and gid ranges to always
be the same. Add option to specify a maximum id.

Change DNA configuration to use shared ranges so that masters and replicas can
actually share the same overall range in a safe way.

Configure replicas so that their default range is depleted. This will force
them to fetch a range portion from the master on the first install.

fixes: https://fedorahosted.org/freeipa/ticket/198

Add support for configuring KDC certs for PKINIT

2010-11-18T20:09:36+00:00

This patch adds support only for the selfsign case.
Replica support is also still missing at this stage.

Rename 60sudo.ldif to 60ipasudo.ldif to not overwrite the 389-ds version.

2010-11-09T18:30:45+00:00

This meant that the compat sudo schema was not available.

ticket 439