abbra / freeipa

Mirror of FreeIPA, an integrated security information management solution
http://www.freeipa.org
GNU General Public License v3.0
2 stars 1 forks source link

Global Catalog: AD objectcategory rewriter #30

Closed flo-renaud closed 4 years ago

flo-renaud commented 4 years ago

Global Catalog: configure 389-ds AD objectcategory rewriter

In the GC installer, configure the 389-ds AD objectcategory rewriter so that searches with "(objectcategory=foo)" are handled as "(ObjectCategory=cn=foo,cn=schema,cn=configuration,)"

GlobalCatalog: bump 389-ds version for AD filter rewriter for ObjectCategory

With version 1.4.3.6, 389-ds provides a rewriter for filters using objectCategory. The rewriters allows to translate filters such as "(objectCategory=foo)" into "(objectcategory=cn=foo,cn=schema,cn=configuration,$base)"

This feature is needed by the Global Catalog to mimic AD behavior.

With the version bump, the schema is also more strict and fixes are needed for the convert-schema tool:

abbra commented 4 years ago

@flo-renaud I merged your changes manually. I had to split them into different commits but the result is in the tree. Now to fix the repositories and move to F32 for tests.