diff options
| author | Simo Sorce <ssorce@redhat.com> | 2010-12-20 10:05:17 -0500 |
|---|---|---|
| committer | Simo Sorce <ssorce@redhat.com> | 2010-12-21 17:28:13 -0500 |
| commit | 91f3e79d81671441bbf7c187d1415d864f80d101 (patch) | |
| tree | f6a98d08b07cd7bccefbb2e4dfdc9a961d33a0c5 /install/share/delegation.ldif | |
| parent | efd8b03ccfc5ba25c383eacafa948aa0aa5feddf (diff) | |
| download | freeipa-91f3e79d81671441bbf7c187d1415d864f80d101.tar.gz freeipa-91f3e79d81671441bbf7c187d1415d864f80d101.tar.xz freeipa-91f3e79d81671441bbf7c187d1415d864f80d101.zip | |
Remove referrals when removing agreements
Part of this fix requires also giving proper permission to change the
replication agreements root.
While there also fix replica-related permissions to have the classic
add/modify/remove triplet of permissions.
Fixes: https://fedorahosted.org/freeipa/ticket/630
Diffstat (limited to 'install/share/delegation.ldif')
| -rw-r--r-- | install/share/delegation.ldif | 20 |
1 files changed, 14 insertions, 6 deletions
diff --git a/install/share/delegation.ldif b/install/share/delegation.ldif index 1399c7c8c..7b09ae130 100644 --- a/install/share/delegation.ldif +++ b/install/share/delegation.ldif @@ -441,20 +441,28 @@ member: cn=enrollhost,cn=privileges,cn=accounts,$SUFFIX # Replica administration -dn: cn=managereplica,cn=permissions,cn=accounts,$SUFFIX +dn: cn=addreplica,cn=permissions,cn=accounts,$SUFFIX changetype: add objectClass: top objectClass: groupofnames -cn: managereplica -description: Manage Replication Agreements +cn: addreplica +description: Add Replication Agreements member: cn=replicaadmin,cn=privileges,cn=accounts,$SUFFIX -dn: cn=deletereplica,cn=permissions,cn=accounts,$SUFFIX +dn: cn=modifyreplica,cn=permissions,cn=accounts,$SUFFIX changetype: add objectClass: top objectClass: groupofnames -cn: deletereplica -description: Delete Replication Agreements +cn: modifyreplica +description: Modify Replication Agreements +member: cn=replicaadmin,cn=privileges,cn=accounts,$SUFFIX + +dn: cn=removereplica,cn=permissions,cn=accounts,$SUFFIX +changetype: add +objectClass: top +objectClass: groupofnames +cn: removereplica +description: Remove Replication Agreements member: cn=replicaadmin,cn=privileges,cn=accounts,$SUFFIX # Entitlement management |