[Freeipa-devel] [freeipa PR#5652][opened] Add basic support for subordinate user/group ids

[tiran]

   URL: https://github.com/freeipa/freeipa/pull/5652
Author: tiran
 Title: #5652: Add basic support for subordinate user/group ids
Action: opened

PR body:
"""
New LDAP object class "ipaUserSubordinate" with four new fields:
- ipasubuidnumber / ipasubuidcount
- ipasubgidnumber / ipasgbuidcount

New self-service permission to add subids.

New command user-auto-subid to auto-assign subid

The code hard-codes counts to 65536, sets subgid equal to subuid, and
does not allow removal of subids. There is also a hack that emulates a
DNA plugin with step interval 65536 for testing.

See: https://pagure.io/freeipa/issue/8361
Signed-off-by: Christian Heimes <cheimes(a)redhat.com&gt;
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5652/head:pr5652
git checkout pr5652