summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSumit Bose <sbose@redhat.com>2013-03-04 14:25:43 +0100
committerMartin Kosek <mkosek@redhat.com>2013-03-08 10:46:00 +0100
commit2d90724a7e3a810b58293eb4930b5c5b5793bd66 (patch)
treebf55688c25a48faa78888e13011ad06ec4c2bbc5
parent15cc21cce9d4bf7e44e1fb772afa5bb731a84227 (diff)
downloadfreeipa-2d90724a7e3a810b58293eb4930b5c5b5793bd66.tar.gz
freeipa-2d90724a7e3a810b58293eb4930b5c5b5793bd66.tar.xz
freeipa-2d90724a7e3a810b58293eb4930b5c5b5793bd66.zip
Add NFS specific default for authorization data type
Since the hardcoded default fpr the NFS service was removed the default authorization data type is now set in the global server configuration. https://fedorahosted.org/freeipa/ticket/2960
-rw-r--r--install/updates/60-trusts.update5
1 files changed, 5 insertions, 0 deletions
diff --git a/install/updates/60-trusts.update b/install/updates/60-trusts.update
index cd7a7e355..454ecb745 100644
--- a/install/updates/60-trusts.update
+++ b/install/updates/60-trusts.update
@@ -71,6 +71,11 @@ replace:aci:'(targetattr = "userPassword || krbPrincipalKey || sambaLMPassword |
dn: cn=ipaConfig,cn=etc,$SUFFIX
addifnew: ipaKrbAuthzData: MS-PAC
+# Add authorization data type NONE for NFS because the hardcoded default was
+# removed.
+dn: cn=ipaConfig,cn=etc,$SUFFIX
+add: ipaKrbAuthzData: nfs:NONE
+
# Fix typo in some installs in the spelling of ORDERING. They were added
# with a typo which was silently dropped by 389-ds-base, so add in the
# proper ordering syntax now.