freeipa.git/install/updates, branch master

sudoOrder missing in sudoers

2014-01-15T10:00:35+00:00

sudoers compat plugin configuration missed the sudoOrder attribute
and it thus did not show up in ou=sudoers. Add the definion to update
file.

https://fedorahosted.org/freeipa/ticket/4107

Enable Retro Changelog and Content Synchronization DS plugins

2014-01-14T15:37:56+00:00

Enable Retro Changelog and Content Synchronization DS plugins which are required
for SyncRepl support.

Create a working directory /var/named/ipa required by bind-dyndb-ldap v4+.

https://fedorahosted.org/freeipa/ticket/3967

acl: Remove krbPrincipalExpiration from list of admin's excluded attrs

2014-01-14T14:22:27+00:00

Since we're exposing the krbPrincipalExpiration attribute for direct
editing in the CLI, remove it from the list of attributes that
admin cannot edit by default.

Part of: https://fedorahosted.org/freeipa/ticket/3306

Add RADIUS proxy support to ipalib CLI

2013-12-03T13:49:10+00:00

https://fedorahosted.org/freeipa/ticket/3368

Remove schema modifications from update files

2013-11-18T15:54:21+00:00

As schema is now handled by the schema updater, these entries
are superfluous.

https://fedorahosted.org/freeipa/ticket/3454

Add a privilege and a permission needed for automember rebuild command

2013-11-15T11:46:06+00:00

Design: http://www.freeipa.org/page/V3/Automember_rebuild_membership
https://fedorahosted.org/freeipa/ticket/3752

Add support for managing user auth types

2013-11-08T11:48:15+00:00

https://fedorahosted.org/freeipa/ticket/3368

Remove deprecated AllowLMhash config

2013-11-01T08:30:10+00:00

Remove this ipaConfigString value as LM hash is deprecated and in
fact even insecure.

https://fedorahosted.org/freeipa/ticket/3795

Do not add kadmin/changepw ACIs on new installs

2013-10-25T13:26:51+00:00

These ACI were needed when FreeIPA had a custom ipa_kpasswd daemon,
now that a standard kadmin is used, ACIs are not needed anymore as
kadmin uses the same driver as the KDC.

The ACIs is not removed on upgrades to avoid breaking older
replicas which may still use FreeIPA version with the ipa_kpasswd
daemon.

https://fedorahosted.org/freeipa/ticket/3987

Remove faulty DNS memberOf Task

2013-10-04T12:30:13+00:00

This task was added with a DN colliding with privilege update memberOf
task being run later and caused this task to be ineffective and thus
miss some privilege membership, like "SELinux User Map Administrators"

DNS update plugin do not need to run any task at all as privileges
will be updated later in scope of 55-pbacmemberof.update

https://fedorahosted.org/freeipa/ticket/3877