From e6ff83e3610d553f6ff98e3adbfbe3c6984b2f17 Mon Sep 17 00:00:00 2001 From: Martin Babinsky Date: Thu, 23 Jun 2016 20:06:42 +0200 Subject: Provide API for management of host, service, and user principal aliases New commands (*-{add,remove}-principal [PKEY] [PRINCIPAL ...]) were added to manage principal aliases. 'add' commands will check the following: * the correct principal type is supplied as an alias * the principals have correct realm and the realm/alternative suffix (e.g. e-mail) do not overlap with those of trusted AD domains If the entry does not have canonical principal name, the first returned principal name will be set as one. This is mostly to smoothly operate on entries created on older servers. 'remove' commands will check that there is at least one principal alias equal to the canonical name left on the entry. See also: http://www.freeipa.org/page/V4/Kerberos_principal_aliases https://fedorahosted.org/freeipa/ticket/1365 https://fedorahosted.org/freeipa/ticket/3961 https://fedorahosted.org/freeipa/ticket/5413 Reviewed-By: David Kupka Reviewed-By: Jan Cholasta --- VERSION | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'VERSION') diff --git a/VERSION b/VERSION index dd2e1aba1..b9b5485bc 100644 --- a/VERSION +++ b/VERSION @@ -90,5 +90,5 @@ IPA_DATA_VERSION=20100614120000 # # ######################################################## IPA_API_VERSION_MAJOR=2 -IPA_API_VERSION_MINOR=207 -# Last change: mbabinsk: Make framework consider krbcanonicalname as service primary key +IPA_API_VERSION_MINOR=208 +# Last change: mbabinsk: Provide API for management of host, service, and user principal aliases -- cgit