FreeIPA-devel September 2026

freeipa-devel@lists.fedorahosted.org

3 participants
2 discussions

Start a nNew thread

Request for OID allocation: Group Policy schema extension for FreeIPA
by Данила Скачедубов 09 Oct '26

09 Oct '26

2 12

Re: Request for OID allocation: Group Policy schema extension for FreeIPA
by Evgeny Sinelnikov 14 Sep '26

14 Sep '26

Hi Alexander, пн, 14 сент. 2026 г. в 15:07, Данила Скачедубов <skada2012(a)yandex.ru>: > > + sin@ > > Hi Alexander, > > Thank you for the update. I completely understand that the security fixes take priority. > > I just wanted to mention that the OID allocation is currently a dependency for the next stage of my work on the Group Policy schema extension, so even a rough indication of when you might be able to review the request would be very helpful for planning. I'd like to follow up on the status of this request - the OID allocation is currently a hard dependency for the next release of our Group Policy plugin for FreeIPA, and its public release is blocked until the schema receives final OIDs. We think so, at this time. Would it be possible to allocate the OIDs by the end of September? If that is not feasible, any approximate date you could give us would be very helpful for adjusting our release plans accordingly. The full schema files remain available here: https://github.com/danila-Skachedubov/freeipa-server-gpo/tree/master/plugin… > > Please let me know if there is any additional information or preparation I can provide to make the review easier when you have time. > > Best regards, > Danila > > > ---------------- > [Freeipa-devel] Re: Request for OID allocation: Group Policy schema extension for FreeIPA; > 07.09.2026, 16:00, "Alexander Bokovoy via FreeIPA-devel" <freeipa-devel(a)lists.fedorahosted.org>: > > Hi Danila, > > On Mon, 07 Sep 2026, Данила Скачедубов wrote: > > Hi, could I please ask if my request will be considered and when I might expect > a reply? > > > It is still in my queue. Sorry, I'm busy with security fixes. > > > ---------------- > Кому: Данила Скачедубов (skada2012(a)yandex.ru) > Копия: Discussion of the development of FreeIPA > (freeipa-devel(a)lists.fedorahosted.org) > Тема: [Freeipa-devel] Re: Request for OID allocation: Group Policy schema > extension for FreeIPA; > 10.08.2026, 16:16, "Alexander Bokovoy" <abokovoy(a)redhat.com>: > > > On Mon, 10 Aug 2026, Данила Скачедубов wrote: > > > > > Hi Alexander, > > I've updated the schema extension. The updated details are available here: > [1][1]https://github.com/danila-Skachedubov/freeipa-server-gpo/tree/master/p… > . > > > > Thanks. I am a bit busy this week, hopefully will be able to look at it > after August 20th. > > > > > > Please take a look when you have a moment. > > Thanks! > ---------------- > Кому: Данила Скачедубов ([2]skada2012(a)yandex.ru) > Копия: Discussion of the development of FreeIPA > ([3]freeipa-devel(a)lists.fedorahosted.org) Alexander Bokovoy > ([4]abokovoy(a)redhat.com) > Тема: [Freeipa-devel] Re: Request for OID allocation: Group Policy schema > extension for FreeIPA; > 01.07.2026, 09:17, "Alexander Bokovoy via FreeIPA-devel" > <[5]freeipa-devel(a)lists.fedorahosted.org>: > > > > > On Аўт, 23 чэр 2026, Данила Скачедубов wrote: > > > > > > > > Hi Alexander, > > Just a quick follow-up. When you have a moment to look at the schemas, > could you let us know if the current structure of groupPolicyChain and > the > gpLink attribute looks acceptable for allocation, or if you’d prefer > changes before assigning OIDs? > > > > > > > > I still need to find time to look at the schema. Sorry for delays. > > > > > > > > > > Full schemas are here: > [2][6]https://github.com/danila-Skachedubov/freeipa-server-gpo/tree/master/p… > > Thanks for your time, > Danila > > ---------------- > Кому: Discussion of the development of FreeIPA > ([3][7]freeipa-devel(a)lists.fedorahosted.org) > Тема: [Freeipa-devel] Request for OID allocation: Group Policy schema > extension for FreeIPA; > 17.06.2026, 11:15, "Alexander Bokovoy" <[4][8]abokovoy(a)redhat.com>: > > > Hi Danila, > > > > I'm traveling today back from the Flock conference but I'll be able > to > > look at it tomorrow. Can you please send the full schema files > > reference? > > > > -- > > / Alexander Bokovoy > > Sr. Principal Software Engineer > > Security / Identity Management Engineering > > Red Hat Limited, Finland > > > > > > On Wed, 17 Jun 2026, 10.02 Данила Скачедубов via FreeIPA-devel, > > <[1][5][9]freeipa-devel(a)lists.fedorahosted.org> wrote: > > >> Hello FreeIPA team, > >> > >> We are developing a FreeIPA plugin that adds Group Policy Object > (GPO) > >> management support — allowing FreeIPA to create, manage, and apply > >> Group Policies in a similar way to Active Directory. > >> > >> The plugin extends FreeIPA with: > >> - Group Policy Container objects (storing GPO metadata in LDAP) > >> - Group Policy Chain objects (linking GPOs to user/computer groups) > >> - Group Policy Master object (PDC emulator reference + chain list) > >> > >> Source code is available on GitHub: > >> [2][6][10]https://github.com/danila-Skachedubov/ipa-gpo-install > >> > >> Full schema definitions (LDIF files) are in the repository at: > >> plugin/schema.d/75-gpc.ldif > >> plugin/schema.d/75-gpmaster.ldif > >> plugin/schema.d/75-chain.ldif > >> > >> We would like to request OID allocation under the FreeIPA arc > >> (2.16.840.1.113730.3.8.x) for the following schema elements. > >> > >> We need 3 objectClasses and 11 attributeTypes. > >> > >> Schema files are installed via /usr/share/ipa/schema.d/ and applied > >> by ipa-server-upgrade. > >> > >> --- > >> > >> ## ObjectClasses (3) > >> > >> 1. groupPolicyContainer (STRUCTURAL, SUP top) > >> MUST: cn > >> MAY: displayName, distinguishedName, flags, > >> gPCFileSysPath, gPCMachineExtensionNames, > >> gPCUserExtensionNames, versionNumber > >> > >> 2. groupPolicyMaster (STRUCTURAL, SUP top) > >> MUST: cn, pdcEmulator > >> MAY: chainList > >> > >> 3. groupPolicyChain (STRUCTURAL, SUP top) > >> MUST: cn > >> MAY: userGroup, computerGroup, gpLink, > >> displayName, active > >> > >> ## Attribute Types (11) > >> > >> Name | Syntax | Multi-valued > >> ------------------------------------------- | > >> ---------------------------------| ------------ > >> flags | INTEGER > > >> | single > >> gPCFileSysPath | DIRECTORY_STRING | single > >> gPCMachineExtensionNames | DIRECTORY_STRING | single > >> gPCUserExtensionNames | DIRECTORY_STRING | single > >> versionNumber | INTEGER > > >> | single > >> chainList | DN > > >> | multi > >> pdcEmulator | DIRECTORY_STRING | > single > >> userGroup | DN > > >> | single > >> computerGroup | DN > > >> | single > >> gpLink | DN > > >> | multi > >> active | BOOLEAN > > >> | single > >> > >> Could you please allocate OIDs for these elements? > >> > >> We can also accept a block reservation if the specific numbering > >> is not yet decided. > >> > >> Thank you, > >> Danila Skachedubov > >> -- > >> _______________________________________________ > >> FreeIPA-devel mailing list -- > [3][7][11]freeipa-devel(a)lists.fedorahosted.org > >> To unsubscribe send an email to > >> [4][8][12]freeipa-devel-leave(a)lists.fedorahosted.org > >> Fedora Code of Conduct: > >> > [5][9][13]https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > >> List Guidelines: > >> [6][10][14]https://fedoraproject.org/wiki/Mailing_list_guidelines > >> List Archives: > >> > [7][11][15]https://lists.fedorahosted.org/archives/list/freeipa-devel@lists.… > >> Do not reply to spam, report it: > >> [8][12][16]https://forge.fedoraproject.org/infra/tickets/issues/new > > > > > > > > References > > > > > > > > Visible links > 1. [13][17]mailto:freeipa-devel@lists.fedorahosted.org > 2. [14][18]https://github.com/danila-Skachedubov/ipa-gpo-install > 3. [15][19]mailto:freeipa-devel@lists.fedorahosted.org > 4. [16][20]mailto:freeipa-devel-leave@lists.fedorahosted.org > 5. > [17][21]https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > 6. [18][22]https://fedoraproject.org/wiki/Mailing_list_guidelines > 7. > [19][23]https://lists.fedorahosted.org/archives/list/freeipa-devel@lists.fed… > 8. [20][24]https://forge.fedoraproject.org/infra/tickets/issues/new > > > > > > > > > > > > > > > > -- > / Alexander Bokovoy > Sr. Principal Software Engineer > Security / Identity Management Engineering > Red Hat Limited, Finland > > > > > > > > -- > _______________________________________________ > FreeIPA-devel mailing list -- [21][25]freeipa-devel(a)lists.fedorahosted.org > To unsubscribe send an email to > [22][26]freeipa-devel-leave(a)lists.fedorahosted.org > Fedora Code of Conduct: > [23][27]https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: > [24][28]https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > [25][29]https://lists.fedorahosted.org/archives/list/freeipa-devel@lists.fed… > Do not reply to spam, report it: > [26][30]https://forge.fedoraproject.org/infra/tickets/issues/new > > > > References > > > > Visible links > 1. > [31]https://github.com/danila-Skachedubov/freeipa-server-gpo/tree/master/plu… > 2. > [32]https://github.com/danila-Skachedubov/freeipa-server-gpo/tree/master/plu… > 3. [33]mailto:freeipa-devel@lists.fedorahosted.org > 4. [34]mailto:abokovoy@redhat.com > 5. [35]mailto:freeipa-devel@lists.fedorahosted.org > 6. [36]https://github.com/danila-Skachedubov/ipa-gpo-install > 7. [37]mailto:freeipa-devel@lists.fedorahosted.org > 8. [38]mailto:freeipa-devel-leave@lists.fedorahosted.org > 9. [39]https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > 10. [40]https://fedoraproject.org/wiki/Mailing_list_guidelines > 11. > [41]https://lists.fedorahosted.org/archives/list/freeipa-devel@lists.fedorah… > 12. [42]https://forge.fedoraproject.org/infra/tickets/issues/new > 13. [43]mailto:freeipa-devel@lists.fedorahosted.org > 14. [44]https://github.com/danila-Skachedubov/ipa-gpo-install > 15. [45]mailto:freeipa-devel@lists.fedorahosted.org > 16. [46]mailto:freeipa-devel-leave@lists.fedorahosted.org > 17. [47]https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > 18. [48]https://fedoraproject.org/wiki/Mailing_list_guidelines > 19. > [49]https://lists.fedorahosted.org/archives/list/freeipa-devel@lists.fedorah… > 20. [50]https://forge.fedoraproject.org/infra/tickets/issues/new > 21. [51]mailto:freeipa-devel@lists.fedorahosted.org > 22. [52]mailto:freeipa-devel-leave@lists.fedorahosted.org > 23. [53]https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > 24. [54]https://fedoraproject.org/wiki/Mailing_list_guidelines > 25. > [55]https://lists.fedorahosted.org/archives/list/freeipa-devel@lists.fedorah… > 26. [56]https://forge.fedoraproject.org/infra/tickets/issues/new > > > > > > > > -- > / Alexander Bokovoy > Sr. Principal Software Engineer > Security / Identity Management Engineering > Red Hat Limited, Finland > > > References > > Visible links > 1. https://github.com/danila-Skachedubov/freeipa-server-gpo/tree/master/plugin… > 2. mailto:skada2012@yandex.ru > 3. mailto:freeipa-devel@lists.fedorahosted.org > 4. mailto:abokovoy@redhat.com > 5. mailto:freeipa-devel@lists.fedorahosted.org > 6. https://github.com/danila-Skachedubov/freeipa-server-gpo/tree/master/plugin… > 7. mailto:freeipa-devel@lists.fedorahosted.org > 8. mailto:abokovoy@redhat.com > 9. mailto:freeipa-devel@lists.fedorahosted.org > 10. https://github.com/danila-Skachedubov/ipa-gpo-install > 11. mailto:freeipa-devel@lists.fedorahosted.org > 12. mailto:freeipa-devel-leave@lists.fedorahosted.org > 13. https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > 14. https://fedoraproject.org/wiki/Mailing_list_guidelines > 15. https://lists.fedorahosted.org/archives/list/freeipa-devel@lists.fedorahost… > 16. https://forge.fedoraproject.org/infra/tickets/issues/new > 17. mailto:freeipa-devel@lists.fedorahosted.org > 18. https://github.com/danila-Skachedubov/ipa-gpo-install > 19. mailto:freeipa-devel@lists.fedorahosted.org > 20. mailto:freeipa-devel-leave@lists.fedorahosted.org > 21. https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > 22. https://fedoraproject.org/wiki/Mailing_list_guidelines > 23. https://lists.fedorahosted.org/archives/list/freeipa-devel@lists.fedorahost… > 24. https://forge.fedoraproject.org/infra/tickets/issues/new > 25. mailto:freeipa-devel@lists.fedorahosted.org > 26. mailto:freeipa-devel-leave@lists.fedorahosted.org > 27. https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > 28. https://fedoraproject.org/wiki/Mailing_list_guidelines > 29. https://lists.fedorahosted.org/archives/list/freeipa-devel@lists.fedorahost… > 30. https://forge.fedoraproject.org/infra/tickets/issues/new > 31. https://github.com/danila-Skachedubov/freeipa-server-gpo/tree/master/plugin… > 32. https://github.com/danila-Skachedubov/freeipa-server-gpo/tree/master/plugin… > 33. mailto:freeipa-devel@lists.fedorahosted.org > 34. mailto:abokovoy@redhat.com > 35. mailto:freeipa-devel@lists.fedorahosted.org > 36. https://github.com/danila-Skachedubov/ipa-gpo-install > 37. mailto:freeipa-devel@lists.fedorahosted.org > 38. mailto:freeipa-devel-leave@lists.fedorahosted.org > 39. https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > 40. https://fedoraproject.org/wiki/Mailing_list_guidelines > 41. https://lists.fedorahosted.org/archives/list/freeipa-devel@lists.fedorahost… > 42. https://forge.fedoraproject.org/infra/tickets/issues/new > 43. mailto:freeipa-devel@lists.fedorahosted.org > 44. https://github.com/danila-Skachedubov/ipa-gpo-install > 45. mailto:freeipa-devel@lists.fedorahosted.org > 46. mailto:freeipa-devel-leave@lists.fedorahosted.org > 47. https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > 48. https://fedoraproject.org/wiki/Mailing_list_guidelines > 49. https://lists.fedorahosted.org/archives/list/freeipa-devel@lists.fedorahost… > 50. https://forge.fedoraproject.org/infra/tickets/issues/new > 51. mailto:freeipa-devel@lists.fedorahosted.org > 52. mailto:freeipa-devel-leave@lists.fedorahosted.org > 53. https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > 54. https://fedoraproject.org/wiki/Mailing_list_guidelines > 55. https://lists.fedorahosted.org/archives/list/freeipa-devel@lists.fedorahost… > 56. https://forge.fedoraproject.org/infra/tickets/issues/new > > > > > > > -- > / Alexander Bokovoy > Sr. Principal Software Engineer > Security / Identity Management Engineering > Red Hat Limited, Finland > > -- > _______________________________________________ > FreeIPA-devel mailing list -- freeipa-devel(a)lists.fedorahosted.org > To unsubscribe send an email to freeipa-devel-leave(a)lists.fedorahosted.org > Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: https://lists.fedorahosted.org/archives/list/freeipa-devel@lists.fedorahost… > Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new -- Sin (Sinelnikov Evgeny)

1 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel September 2026