freeipa.git/daemons/ipa-slapi-plugins, branch custodia

prevent operation on tombstones

2015-10-15T12:24:33+00:00

Reviewed-By: Jan Cholasta

handle multiple managed suffixes

2015-10-15T12:24:33+00:00

    trigger topology updaet if suffix entry is added
    trigger topology update if managedSuffix is modified in host entry

Reviewed-by: Simo Sorce 
Reviewed-By: Jan Cholasta

topology plugin configuration workaround

2015-10-15T12:24:33+00:00

Reviewed-by: Simo Sorce 
Reviewed-By: Jan Cholasta

Fix an integer underflow bug in libotp

2015-09-29T13:16:09+00:00

Temporarily storing the offset time in an unsigned integer causes the
value of the offset to underflow when a (valid) negative offset value
is generated. Using a signed variable avoids this problem.

https://fedorahosted.org/freeipa/ticket/5333

Reviewed-By: Tomas Babej

Fix minor typos

2015-07-17T12:33:30+00:00

 -> 
overriden -> overridden
ablity -> ability
enties -> entries
the the -> the

https://fedorahosted.org/freeipa/ticket/5109

Reviewed-By: Petr Vobornik 
Reviewed-By: Christian Heimes

extdom: add unit-test for get_user_grouplist()

2015-07-07T23:56:52+00:00

Reviewed-By: Tomas Babej

ipa-pwd-extop: expand error message to tell what user is not allowed to fetch keytab

2015-07-07T23:56:52+00:00

When retrieving keytab, it is useful to know what user was attempting
to fetch the keyts and failed. This is useful to debug one-way trust
where SSSD forks out a process of ipa-getkeytab and it might be using
a wrong credentials cache for authentication purposes.

Part of https://fedorahosted.org/freeipa/ticket/4959

Reviewed-By: Tomas Babej

ipa-sidgen: reduce log level to normal if domain SID is not available

2015-07-07T23:56:52+00:00

To support AD trust agents, we need to run sidgen and extdom plugins
on every IPA master. Lack of working configuration, thus, is not a
failure so reduce log level to normal as sidgen plugin will not
be active if domain SID is missing but it can certainly be kept
enabled.

Part of https://fedorahosted.org/freeipa/ticket/4951

Reviewed-By: Tomas Babej

allow deletion of segment if endpoint is not managed

2015-07-02T09:54:01+00:00

in the preop check do not reject the deletion of a segment, if not both endpoints
are managed servers for the suffix

thisis part of work for ticlet #5072

Reviewed-By: Simo Sorce

v2 improve processing of invalid data.

2015-07-01T10:29:24+00:00

    reject attempts to add segments to suffixes, which do not exist or are not configured.
    check completenes and validity of segment attributes

    cf ticket 5088: https://fedorahosted.org/freeipa/ticket/5088

Reviewed-By: Thierry Bordaz