kanidm/server/lib/src
Firstyear 25c1c1573e
20250213 patch used wrong acp ()
Migrations and server bootstrap are very interconnected processes
and in this we'll be addressing and improving both.

Server bootstrap was performed by creating base entries in phases,
eventually bringing up enough of the *oldest* supported server
minimum remigration level, to then allow triggering of migrations.

Migrations then applied "patches" effectively ontop of this minimum
level to update entries to what they should be in newer versions of
the server.

This scheme has it's pros and cons, but the major con was that to
remove a migration meant squashing it's content back into the
minimum remigration level, and this was a human process that was
quite error prone and difficult to automate. As well, this scheme
also led to cases where the patch migrations would sometimes *not*
reflect all the needed changes or content, or in one case was actually
undone by a patchlevel fix up that was required to address a bug.

Invariably this led to issues, and cases where a new server may have
different content to a migrated one - not exactly what we want!

This is a new migration scheme that addresses this fragility. However
what it trades is verbosity of the content.

Rather than having a base set of entries and patching/updating small
sections ontop, we have migration data folders that contain the full
set of entries as they should appear at that migration level. This
makes the bootstrap process easier as we can just apply the migration
level as a whole, and targetted to what precise version we want.

This also makes migrations more durable as the content is explicitly
copied and all entries fully applied, so there is no risk that a
migration or data change can be forgotten or applied incorrectly. We
are expressing the full state of what our builtin and provided entries
should be.

Finally this rips out a number of places where migration data was being
used as test case data. Not all of these have been replaced (notably
in authsession with Account), but the majority have and have been replaced
with clearer use of constants rather than building whole entries just to
access the name and throw them away for example.
2025-02-28 10:18:48 +10:00
..
be Feat: Allowing spn query with non-spn structured data in LDAP () 2025-02-08 06:37:28 +00:00
constants 20250213 patch used wrong acp () 2025-02-28 10:18:48 +10:00
credential TOTP label verification () 2025-02-19 06:54:50 +00:00
idm 20250213 patch used wrong acp () 2025-02-28 10:18:48 +10:00
migration_data 20250213 patch used wrong acp () 2025-02-28 10:18:48 +10:00
plugins Fixes : add configurable maximum queryable attributes for LDAP () 2025-02-21 12:14:47 +10:00
repl Cleanup of println and other outputs () 2024-12-04 15:13:14 +10:00
server 20250213 patch used wrong acp () 2025-02-28 10:18:48 +10:00
valueset chore: Remove empty scopemaps () 2025-02-09 11:19:52 +10:00
entry.rs Feat: Allowing spn query with non-spn structured data in LDAP () 2025-02-08 06:37:28 +00:00
event.rs 20250213 patch used wrong acp () 2025-02-28 10:18:48 +10:00
filter.rs [htmx] Admin ui for groups and users management () 2025-02-22 13:43:54 +10:00
lib.rs 20250213 patch used wrong acp () 2025-02-28 10:18:48 +10:00
macros.rs Cleanup of println and other outputs () 2024-12-04 15:13:14 +10:00
modify.rs Bump the all group with 22 updates () 2025-01-29 13:57:38 +10:00
schema.rs Clippy Lints () 2024-11-30 06:13:26 +00:00
status.rs Make /status less noisy () 2024-02-22 17:34:46 +10:00
testkit.rs Add domain version test framework () 2024-02-28 21:04:33 +00:00
time.rs 20231008 remove expect used () 2023-10-08 17:39:00 +10:00
utils.rs 20240927 SCIM put () 2024-11-30 06:56:17 +00:00
value.rs Correctly return that uuid2spn changed on domain rename () 2025-02-06 08:50:45 +10:00