freeipa.git/ipaserver/install/plugins, branch master

Restore privileges after forward zones update

2014-07-04T10:48:50+00:00

Ticket: https://fedorahosted.org/freeipa/ticket/3210
Reviewed-By: Petr Spacek

Fix upgrade to forward zones

2014-07-03T12:04:57+00:00

Reviewed-By: Petr Spacek

Upgrade special master zones to forward zones

2014-06-27T12:54:35+00:00

This upgrade is executed only if IPA version is older than 4.0
Requires detection if 'idnsforwardzone' objectclass is presented in
schema before schema is upgraded

Design: http://www.freeipa.org/page/V4/Forward_zones#Updates_and_Upgrades

Ticket: https://fedorahosted.org/freeipa/ticket/3210
Reviewed-By: Martin Kosek

Added upgrade step executed before schmema is upgraded

2014-06-27T12:54:35+00:00

Class PreSchemaUpdate is executed before ldap schema update

This is required by ticket: https://fedorahosted.org/freeipa/ticket/3210

Reviewed-By: Martin Kosek

permission plugin: Join --type objectclass filters with OR

2014-06-23T08:54:43+00:00

For groups, we will need to filter on either posixgroup (which UPGs
have but non-posix groups don't) and groupofnames/nestedgroup
(which normal groups have but UPGs don't).
Join permission_filter_objectclasses with `|` and add them as
a single ipapermtargetfilter value.

Part of the work for: https://fedorahosted.org/freeipa/ticket/3566

Reviewed-By: Martin Kosek

Add $REALM to variables supported by the managed permission updater

2014-06-18T12:56:42+00:00

This will allow converting password policy permissions

Part of the work for: https://fedorahosted.org/freeipa/ticket/4346

Reviewed-By: Martin Kosek

Remove the update_dns_permissions plugin

2014-06-18T12:45:51+00:00

This plugin created permissions that the managed permission
updater would remove right away.

Part of the work for: https://fedorahosted.org/freeipa/ticket/4346

Reviewed-By: Martin Kosek

managed permission updater: Add mechanism to replace SYSTEM permissions

2014-06-18T12:45:50+00:00

The "Read DNS Entries" permission, which was marked SYSTEM (no associated
ACI), can now be converted to a regular managed permission.

Add a mechanism for the updater to replace old SYSTEM permissions.

This cannot be done in an update file because we do not want to replace
V2 permissions with the same name.

Part of the work for: https://fedorahosted.org/freeipa/ticket/4346

Reviewed-By: Martin Kosek

ipaplatform: Move all filesystem paths to ipaplatform.paths module

2014-06-16T17:48:20+00:00

https://fedorahosted.org/freeipa/ticket/4052

Reviewed-By: Petr Viktorin

Make 'permission' the default bind type for managed permissions

2014-06-11T11:21:29+00:00

This reduces typing (or copy/pasting), and draws a bit of attention
to any non-default privileges (currently 'any' or 'anonymous').

Leaving the bindtype out by mistake isn't dangerous: by default
a permission is not granted to anyone, since it is not included in
any priviliges.

Reviewed-By: Martin Kosek