5 Commits

Author	SHA1	Message	Date
Stefan Metzmacher	8f0a0ebcb3	r20557: use ${DOMAINDN} instead of ${BASEDN} ... metze (This used to be commit 2a6e6a2695)	2007-10-10 14:36:56 -05:00
Andrew Bartlett	e8dfa06d45	r20495: Further notes on joining with fedora DS. ... Add in a hook for adding an ACI, needed to allow anonymous access until we hook across a SYSTEM token to the LDAP server. Andrew Bartlett (This used to be commit f45504e271)	2007-10-10 14:36:00 -05:00
Andrew Bartlett	ba1c80524a	r17982: One final hack... ... When against a real, schema-checking LDAP backend, we need extensibleObject on the baseDN entry (as entryUUID isn't run for creating this basic ldif) output. (This used to be commit befac43f59)	2007-10-10 14:17:01 -05:00
Andrew Bartlett	cf7ccba67e	r17352: Don't do a modify on the objectClasses, as OpenLDAP doesn't like ... this. Instead, handle this one in the add. Andrew Bartlett (This used to be commit ab355e1f5f)	2007-10-10 14:15:18 -05:00
Andrew Bartlett	f77c410084	r16264: Add, but do not yet enable, the partitions module. ... This required changes to the rootDSE module, to allow registration of partitions. In doing so I renamed the 'register' operation to 'register_control' and 'register_partition', which changed a few more modules. Due to the behaviour of certain LDAP servers, we create the baseDN entry in two parts: Firstly, we allow the admin to export a simple LDIF file to add to their server. Then we perform a modify to add the remaining attributes. To delete all users in partitions, we must now search and delete all objects in the partition, rather than a simple search from the root. Against LDAP, this might not delete all objects, so we allow this to fail. In testing, we found that the 'Domain Controllers' container was misnamed, and should be 'CN=', rather than 'OU='. To avoid the Templates being found in default searches, they have been moved to CN=Templates from CN=Templates,${BASEDN}. Andrew Bartlett (This used to be commit b49a4fbb57)	2007-10-10 14:09:09 -05:00