freeipa.git/ipaserver/install/plugins/Makefile.am, branch webui_isolate

Remove usage of app_PYTHON in ipaserver Makefiles

2014-12-10T14:42:39+00:00

- Remove ChangeLog from ipa-client/Makefile.am

https://fedorahosted.org/freeipa/ticket/4700

Reviewed-By: Martin Basti

Fix upgrade referint plugin

2014-11-13T12:26:34+00:00

Mixing 'Old' and 'New' attr style for referential integrity plugin causes errors.
Now old setting are migrated to new style setting before upgrade

Ticket: https://fedorahosted.org/freeipa/ticket/4622
Reviewed-By: David Kupka

updater: enable uid uniqueness plugin for posixAccounts

2014-10-21T11:46:55+00:00

https://fedorahosted.org/freeipa/ticket/4636

Reviewed-By: Martin Kosek

Store information about which CA server is master for renewals in LDAP.

2014-03-25T15:54:55+00:00

Reviewed-By: Petr Viktorin

Add nfs:NONE to default PAC types only when needed

2013-04-15T12:46:21+00:00

We need to add nfs:NONE as a default PAC type only if there's no
other default PAC type for nfs. Adds a update plugin which
determines whether default PAC type for nfs is set and adds
nfs:NONE PAC type accordingly.

https://fedorahosted.org/freeipa/ticket/3555

Update anonymous access ACI to protect secret attributes.

2013-01-23T20:31:48+00:00

Update anonymous access ACI so that no users besides Trust Admins
users can read AD Trust key attributes (ipaNTTrustAuthOutgoing,
ipaNTTrustAuthIncoming). The change is applied both for updated
IPA servers and new installations.

Fill ipakrbprincipalalias on upgrades

2012-10-02T19:17:42+00:00

From IPA 3.0, services have by default ipakrbprincipal objectclass which
allows ipakrbprincipalalias attribute used for case-insensitive principal
searches. However, services created in previous version do not have
this objectclass (and attribute) and thus case-insensitive searches
may return inconsistent results.

Fill ipakrbprincipalalias on upgrades for all 2.x services. Also treat
Treat the ipakrbprincipal as optional to avoid missing services in
service-find command if the upgrade fails for any reason.

https://fedorahosted.org/freeipa/ticket/3106

Add nsds5ReplicaStripAttrs to replica agreements

2012-09-04T09:30:57+00:00

Generalize the fix_replica_memberof update plugin to allow updating more
replication attributes.

Add nsds5ReplicaStripAttrs to replication agreements on update and
replica install.

https://fedorahosted.org/freeipa/ticket/2534

Query and transfer ACLs for DNS zones

2012-02-24T08:40:43+00:00

Provide a way to specify BIND allow-query and allow-transfer ACLs
for DNS zones.

IMPORTANT: new bind-dyndb-ldap adds a zone transfer ability. To
avoid zone information leaks to unintended places, allow-transfer
ACL for every zone is by default set to none and has to be
explicitly enabled by an Administrator. This is done both for new
DNS zones and old DNS zones during RPM update via new DNS upgrade
plugin.

https://fedorahosted.org/freeipa/ticket/1211

Make sure memberof is in replication attribute exclusion list.

2012-02-23T14:54:59+00:00

A previous bug caused this attribute to not be added which would lead
to unnecessary replication. This runs as an updater plugin.

https://fedorahosted.org/freeipa/ticket/2223