summaryrefslogtreecommitdiffstats
path: root/install/share/default-aci.ldif
diff options
context:
space:
mode:
authorRob Crittenden <rcritten@redhat.com>2010-12-01 17:48:41 -0500
committerRob Crittenden <rcritten@redhat.com>2010-12-10 13:41:35 -0500
commit1a20d754216bafb82aa40ea584c7de7c9a5b0b07 (patch)
treeeaf7ebf3bab59caf6ea7cb381605c695b862c47c /install/share/default-aci.ldif
parentbfaea1dd78bbf6de0248ef8e33784d57ead9d24a (diff)
downloadfreeipa-1a20d754216bafb82aa40ea584c7de7c9a5b0b07.tar.gz
freeipa-1a20d754216bafb82aa40ea584c7de7c9a5b0b07.tar.xz
freeipa-1a20d754216bafb82aa40ea584c7de7c9a5b0b07.zip
Set labels on all attributes in the config object.
Make the cert subject base read-only. This is here only so replicated servers know their base. ticket 466
Diffstat (limited to 'install/share/default-aci.ldif')
-rw-r--r--install/share/default-aci.ldif2
1 files changed, 1 insertions, 1 deletions
diff --git a/install/share/default-aci.ldif b/install/share/default-aci.ldif
index 423922754..d725cd5c1 100644
--- a/install/share/default-aci.ldif
+++ b/install/share/default-aci.ldif
@@ -18,7 +18,7 @@ changetype: modify
add: aci
aci: (targetattr = "givenName || sn || cn || displayName || title || initials || loginShell || gecos || homePhone || mobile || pager || facsimileTelephoneNumber || telephoneNumber || street || roomNumber || l || st || postalCode || manager || secretary || description || carLicense || labeledURI || inetUserHTTPURL || seeAlso || employeeType || businessCategory || ou")(version 3.0;acl "Self service";allow (write) userdn = "ldap:///self";)
-dn: cn=ipaConfig,cn=etc,$SUFFIX
+dn: cn=etc,$SUFFIX
changetype: modify
add: aci
aci: (targetfilter = "(objectClass=ipaGuiConfig)")(targetattr != "aci")(version 3.0;acl "Admins can change GUI config"; allow (read, search, compare, write) groupdn = "ldap:///cn=admins,cn=groups,cn=accounts,$SUFFIX";)