freeipa.git/ipaserver/plugins, branch navigation

Optimize and dynamically verify group membership

2011-04-22T18:15:16+00:00

Rather than doing full searches for members read each member individually
to determine if it is direct or indirect.

Also add a fail-safe when calculating indirect membership so removing
a member will log enough information for debugging (ticket 1133).

https://fedorahosted.org/freeipa/ticket/1139
https://fedorahosted.org/freeipa/ticket/1133

Cache the value of get_ipa_config() in the request context.

2011-03-31T17:08:32+00:00

There are some operations that fetch the configuration multiple times.
This will return a cached value instead of getting it from LDAP over
and over.

ticket 1023

Escape LDAP characters in member and memberof searches

2011-03-31T16:52:08+00:00

https://fedorahosted.org/freeipa/ticket/1140

Replace only if old and new have nothing in common

2011-03-03T16:02:02+00:00

Jakub did the initial diagnosis of this, I added a fix for removing
the last entry when removing members and a test case.

ticket 1000

Collect memberof information for sudo commands.

2011-02-23T23:44:23+00:00

We weren't searching the cn=sudo container so all members of a
sudocmdgroup looked indirect.

Add a label for sudo command groups.

Update the tests to include verifying that membership is done
properly.

ticket 1003

Add handling for indirect memberof other entries.

2011-02-21T16:21:23+00:00

This creates a new custom attribute, memberofindirect_[plugin].
Using this you can tell the difference between being an actual memberof
another entry and being a memberof as the result if inheritence. This is
particularly useful when trying to remove members of an entry, you can
only remove direct members.

I had to add a couple of short sleep calls to make things work a little
better. The memberof plugin runs as a postop and we have no way of knowing
when it has done its work. If we don't pause we may show some stale
data that memberof hasn't updated yet. .3 seconds is an arbitrary choice.

ticket 966

Try to register DNS name through a DNS Update on install.

2011-02-18T00:43:52+00:00

Fixes: https://fedorahosted.org/freeipa/ticket/935

Raise NotImplementedError for selfsigned cert-remove-hold

2011-02-17T22:34:01+00:00

Code cleanup

2011-02-15T20:50:36+00:00

This patch removes two files which seem to be long obsoleted and not
used any more.

Ignore case when removing group members.

2011-02-14T15:22:28+00:00

ticket 944