summaryrefslogtreecommitdiffstats
path: root/API.txt
diff options
context:
space:
mode:
authorAlexander Bokovoy <abokovoy@redhat.com>2016-06-06 08:55:44 +0300
committerMartin Basti <mbasti@redhat.com>2016-06-09 21:04:31 +0200
commit8ca7a4c94796afa280de7e7f5191b48ad667b219 (patch)
tree173c327c8c32ad790549af7973fa2052f9dcd379 /API.txt
parent971b4bf009f051819d757d451e213c3c82de1c97 (diff)
downloadfreeipa-8ca7a4c94796afa280de7e7f5191b48ad667b219.tar.gz
freeipa-8ca7a4c94796afa280de7e7f5191b48ad667b219.tar.xz
freeipa-8ca7a4c94796afa280de7e7f5191b48ad667b219.zip
trusts: Add support for an external trust to Active Directory domain
External trust is a trust that can be created between Active Directory domains that are in different forests or between an Active Directory domain. Since FreeIPA does not support non-Kerberos means of communication, external trust to Windows NT 4.0 or earlier domains is not supported. The external trust is not transitive and can be established to any domain in another forest. This means no access beyond the external domain is possible via the trust link. Resolves: https://fedorahosted.org/freeipa/ticket/5743 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
Diffstat (limited to 'API.txt')
-rw-r--r--API.txt3
1 files changed, 2 insertions, 1 deletions
diff --git a/API.txt b/API.txt
index f17093022..d5fbc2750 100644
--- a/API.txt
+++ b/API.txt
@@ -5208,12 +5208,13 @@ arg: Str('cn', cli_name='name')
option: Str('version?')
output: Output('result')
command: trust_add
-args: 1,14,3
+args: 1,15,3
arg: Str('cn', cli_name='realm')
option: Str('addattr*', cli_name='addattr')
option: Flag('all', autofill=True, cli_name='all', default=False)
option: Int('base_id?', cli_name='base_id')
option: Bool('bidirectional?', cli_name='two_way', default=False)
+option: Bool('external?', cli_name='external', default=False)
option: Int('range_size?', cli_name='range_size')
option: StrEnum('range_type?', cli_name='range_type', values=[u'ipa-ad-trust-posix', u'ipa-ad-trust'])
option: Flag('raw', autofill=True, cli_name='raw', default=False)