summaryrefslogtreecommitdiffstats
path: root/ipaserver/install/adtrustinstance.py
diff options
context:
space:
mode:
authorSumit Bose <sbose@redhat.com>2012-06-21 12:54:34 +0200
committerMartin Kosek <mkosek@redhat.com>2012-06-28 08:02:05 +0200
commit65ad26166321af2fc776d5adf22709513fb78b07 (patch)
tree00e38eed3f3581b7767e28b725fd2246c789a1d8 /ipaserver/install/adtrustinstance.py
parent63567479dfeafc4391e20bec8e8c02401580a248 (diff)
downloadfreeipa-65ad26166321af2fc776d5adf22709513fb78b07.tar.gz
freeipa-65ad26166321af2fc776d5adf22709513fb78b07.tar.xz
freeipa-65ad26166321af2fc776d5adf22709513fb78b07.zip
Add sidgen postop and task
A postop plugin is added to create the SID for new created users and groups. A directory server task allows to set the SID for existing users and groups. Fixes https://fedorahosted.org/freeipa/ticket/2825
Diffstat (limited to 'ipaserver/install/adtrustinstance.py')
-rw-r--r--ipaserver/install/adtrustinstance.py8
1 files changed, 8 insertions, 0 deletions
diff --git a/ipaserver/install/adtrustinstance.py b/ipaserver/install/adtrustinstance.py
index 4d417c8d..ba2e6ef5 100644
--- a/ipaserver/install/adtrustinstance.py
+++ b/ipaserver/install/adtrustinstance.py
@@ -223,6 +223,13 @@ class ADTRUSTInstance(service.Service):
except:
pass
+ def __add_sidgen_module(self):
+ try:
+ self._ldap_mod("ipa-sidgen-conf.ldif", self.sub_dict)
+ self._ldap_mod("ipa-sidgen-task-conf.ldif", self.sub_dict)
+ except:
+ pass
+
def __write_smb_registry(self):
template = os.path.join(ipautil.SHARE_DIR, "smb.conf.template")
conf = ipautil.template_file(template, self.sub_dict)
@@ -430,6 +437,7 @@ class ADTRUSTInstance(service.Service):
self.step("adding cifs Kerberos principal", self.__setup_principal)
self.step("adding admin(group) SIDs", self.__add_admin_sids)
self.step("activating CLDAP plugin", self.__add_cldap_module)
+ self.step("activating sidgen plugin and task", self.__add_sidgen_module)
self.step("configuring smbd to start on boot", self.__enable)
if not self.no_msdcs:
self.step("adding special DNS service records", \