freeipa.git/install/updates, branch mspac

Remove faulty DNS memberOf Task

2013-10-04T12:30:13+00:00

This task was added with a DN colliding with privilege update memberOf
task being run later and caused this task to be ineffective and thus
miss some privilege membership, like "SELinux User Map Administrators"

DNS update plugin do not need to run any task at all as privileges
will be updated later in scope of 55-pbacmemberof.update

https://fedorahosted.org/freeipa/ticket/3877

ipa-sam: do not modify objectclass when trust object already created

2013-09-20T07:59:02+00:00

When trust is established, last step done by IPA framework is to set
encryption types associated with the trust. This operation fails due
to ipa-sam attempting to modify object classes in trust object entry
which is not allowed by ACI.

Additionally, wrong handle was used by dcerpc.py code when executing
SetInformationTrustedDomain() against IPA smbd which prevented even to
reach the point where ipa-sam would be asked to modify the trust object.

Increase default SASL buffer size

2013-08-07T12:13:56+00:00

Default SASL buffer size was too small and could lead for example to
migration errors.

https://fedorahosted.org/freeipa/ticket/3826

Add Camellia ciphers to allowed list.

2013-07-18T07:49:38+00:00

https://fedorahosted.org/freeipa/ticket/3749

Fix for small syntax error in OTP schema

2013-07-11T09:39:29+00:00

https://fedorahosted.org/freeipa/ticket/3765

Add missing equality index for ipaUniqueId.

2013-07-11T09:39:26+00:00

https://fedorahosted.org/freeipa/ticket/3743

Add missing substring indices for attributes managed by the referint plugin.

2013-07-11T09:39:26+00:00

The referint plugin does a substring search on these attributes each time an
entry is deleted, which causes a noticable slowdown for large directories if
the attributes are not indexed.

https://fedorahosted.org/freeipa/ticket/3706

Enable SASL mapping fallback.

2013-06-27T15:06:51+00:00

Assign a default priority of 10 to our SASL mappings.

https://fedorahosted.org/freeipa/ticket/3330

Add ipaRangeType attribute to LDAP Schema

2013-06-10T09:27:33+00:00

This adds a new LDAP attribute ipaRangeType with
OID 2.16.840.1.113730.3.8.11.41 to the LDAP Schema.

ObjectClass ipaIDrange has been altered to require
ipaRangeType attribute.

Part of https://fedorahosted.org/freeipa/ticket/3647

Do not check userPassword with 7-bit plugin

2013-06-06T16:12:50+00:00

Default list of attributes that are checked with 7-bit plugin
for being 7-bit clean includes userPassword. Consecutively, one
is unable to set passwords that contain non-ascii characters.

https://fedorahosted.org/freeipa/ticket/3640