ca11a28 trusts: Do not pass base-id to the subdomain ranges

1 file Authored by tbabej 10 years ago, Committed by mkosek 10 years ago,
    trusts: Do not pass base-id to the subdomain ranges
    
    For trusted domains base id is calculated using a murmur3 hash of the
    domain Security Identifier (SID). During trust-add we create ranges for
    forest root domain and other forest domains. Since --base-id explicitly
    overrides generated base id for forest root domain, its value should not
    be passed to other forest domains' ranges -- their base ids must be
    calculated based on their SIDs.
    
    In case base id change for non-root forest domains is required, it can
    be done manually through idrange-mod command after the trust is
    established.
    
    https://fedorahosted.org/freeipa/ticket/4041
    
        
file modified
+5 -0