URL: https://github.com/freeipa/freeipa/pull/5652 Author: tiran Title: #5652: Add basic support for subordinate user/group ids Action: opened

PR body: """ New LDAP object class "ipaUserSubordinate" with four new fields: - ipasubuidnumber / ipasubuidcount - ipasubgidnumber / ipasgbuidcount

New self-service permission to add subids.

New command user-auto-subid to auto-assign subid

The code hard-codes counts to 65536, sets subgid equal to subuid, and does not allow removal of subids. There is also a hack that emulates a DNA plugin with step interval 65536 for testing.

See: https://pagure.io/freeipa/issue/8361 Signed-off-by: Christian Heimes cheimes@redhat.com """

To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5652/head:pr5652 git checkout pr5652