summaryrefslogtreecommitdiffstats
path: root/install/updates/10-schema_compat.update
Commit message (Collapse)AuthorAgeFilesLines
* schema-compat: set precedence to 49 to allow OTP binds over compat treeAlexander Bokovoy2014-04-041-0/+7
| | | | | | | | | | | | | schema-compat plugin rewrites bind DN to point to the original entry on LDAP bind operation. To work with OTP tokens this requires that schema-compat's pre-bind callback is called before pre-bind callback of the ipa-pwd-extop plugin. Therefore, schema-compat plugin should have a nsslapd-pluginprecedence value lower than (default) 50 which is used by the ipa-pwd-extop plugin. Note that this will only work if ticket 47699 is fixed in 389-ds. Reviewed-By: Nathaniel McCallum <npmccallum@redhat.com>
* sudoOrder missing in sudoersMartin Kosek2014-01-151-0/+2
| | | | | | | | sudoers compat plugin configuration missed the sudoOrder attribute and it thus did not show up in ou=sudoers. Add the definion to update file. https://fedorahosted.org/freeipa/ticket/4107
* Remove disabled entries from sudoers compat tree.Jan Cholasta2013-03-061-0/+2
| | | | | | | The removal is triggered by generating an invalid RDN when ipaEnabledFlag of the original entry is FALSE. https://fedorahosted.org/freeipa/ticket/3437
* - create a "cn=computers" compat area populated with ieee802Device entries ↵Nalin Dahyabhai2012-04-261-0/+15
| | | | corresponding to computers with fqdn and macAddress attributes
* Return consistent value when hostcat and usercat is all.Rob Crittenden2012-04-081-0/+4
| | | | | | | | | | We were returning '' for the first entry when hostcat and usercat were set to all. All subsequent entries were padded with - which effectively denied access. This requires slapi-nis 0.40+ https://fedorahosted.org/freeipa/ticket/2192
* Correct behavior for sudorunasgroup vs sudorunasuserJr Aquino2011-07-191-0/+2
https://fedorahosted.org/freeipa/ticket/1309