freeipa.git/ipalib/plugins, branch master

trustdomain-find: report status of the (sub)domain

2014-01-15T15:19:26+00:00

Show status of each enumerated domain

trustdomain-find shows list of domains associated with the trust.
Each domain except the trust forest root can be enabled or disabled
with the help of trustdomain-enable and trustdomain-disable commands.

https://fedorahosted.org/freeipa/ticket/4096

trust-fetch-domains: create ranges for new child domains

2014-01-15T14:43:40+00:00

When trust is added, we do create ranges for discovered child domains.
However, this functionality was not available through
'trust-fetch-domains' command.

Additionally, make sure non-existing trust will report proper error in
trust-fetch-domains.

https://fedorahosted.org/freeipa/ticket/4111
https://fedorahosted.org/freeipa/ticket/4104

Add missing example to sudorule

2014-01-15T10:01:36+00:00

https://fedorahosted.org/freeipa/ticket/4090

Change the way we determine if the host has a password set.

2014-01-15T09:02:49+00:00

When creating a host with a password we don't set a Kerberos
principal or add the Kerberos objectclasses. Those get added when the
host is enrolled. If one passed in --password= (so no password) then
we incorrectly thought the user was in fact setting a password, so the
principal and objectclasses weren't updated.

https://fedorahosted.org/freeipa/ticket/4102

Use old entry state in LDAPClient.update_entry.

2014-01-10T13:41:39+00:00

https://fedorahosted.org/freeipa/ticket/3488

hbactest does not work for external users

2014-01-10T11:55:44+00:00

Original patch for ticket #3803 implemented support to resolve SIDs
through SSSD. However, it also broke hbactest for external users. The
result of the updated external member group search must be local
non-external groups, not the external ones. Otherwise the rule is not
matched.

https://fedorahosted.org/freeipa/ticket/3803

Allow anonymous and all permissions

2014-01-07T08:56:41+00:00

Disallow adding permissions with non-default bindtype to privileges

Ticket: https://fedorahosted.org/freeipa/ticket/4032
Design: http://www.freeipa.org/page/V3/Anonymous_and_All_permissions

Use new registration API in the privilege plugin

2014-01-07T08:56:36+00:00

Add OTP support to ipalib CLI

2013-12-18T08:58:59+00:00

https://fedorahosted.org/freeipa/ticket/3368

permission_find: Do not fail for ipasearchrecordslimit=-1

2013-12-17T11:29:56+00:00

ipasearchrecordslimit can be -1, which means unlimited.
The permission_find post_callback failed in this case in legacy
permission handling.
Do not fail in this case.