summaryrefslogtreecommitdiffstats
path: root/install/share/dns.ldif
diff options
context:
space:
mode:
authorRob Crittenden <rcritten@redhat.com>2010-12-22 11:11:29 -0500
committerRob Crittenden <rcritten@redhat.com>2010-12-22 11:26:49 -0500
commitd84ffd9e548d2cc1f4147e9b24906e4d7241f496 (patch)
tree6d797b1997aeb9776aaf88b2c12e34b428f1e592 /install/share/dns.ldif
parent07e55f44b27deee33066437771a5c4829761d6c5 (diff)
downloadfreeipa-d84ffd9e548d2cc1f4147e9b24906e4d7241f496.tar.gz
freeipa-d84ffd9e548d2cc1f4147e9b24906e4d7241f496.tar.xz
freeipa-d84ffd9e548d2cc1f4147e9b24906e4d7241f496.zip
Move permissions and privileges to their own container, cn=pbac,$SUFFIX
ticket 638
Diffstat (limited to 'install/share/dns.ldif')
-rw-r--r--install/share/dns.ldif28
1 files changed, 14 insertions, 14 deletions
diff --git a/install/share/dns.ldif b/install/share/dns.ldif
index f9ea4958d..2bebd8271 100644
--- a/install/share/dns.ldif
+++ b/install/share/dns.ldif
@@ -4,41 +4,41 @@ objectClass: nsContainer
objectClass: top
cn: dns
-dn: cn=add dns entries,cn=permissions,cn=accounts,$SUFFIX
+dn: cn=add dns entries,cn=permissions,cn=pbac,$SUFFIX
changetype: add
objectClass: groupofnames
objectClass: top
cn: add dns entries
description: Add DNS entries
-member: cn=dnsadmin,cn=privileges,cn=accounts,$SUFFIX
-member: cn=dnsserver,cn=privileges,cn=accounts,$SUFFIX
+member: cn=dnsadmin,cn=privileges,cn=pbac,$SUFFIX
+member: cn=dnsserver,cn=privileges,cn=pbac,$SUFFIX
-dn: cn=remove dns entries,cn=permissions,cn=accounts,$SUFFIX
+dn: cn=remove dns entries,cn=permissions,cn=pbac,$SUFFIX
changetype: add
objectClass: groupofnames
objectClass: top
cn: remove dns entries
description: Remove DNS entries
-member: cn=dnsadmin,cn=privileges,cn=accounts,$SUFFIX
-member: cn=dnsserver,cn=privileges,cn=accounts,$SUFFIX
+member: cn=dnsadmin,cn=privileges,cn=pbac,$SUFFIX
+member: cn=dnsserver,cn=privileges,cn=pbac,$SUFFIX
-dn: cn=update dns entries,cn=permissions,cn=accounts,$SUFFIX
+dn: cn=update dns entries,cn=permissions,cn=pbac,$SUFFIX
changetype: add
objectClass: groupofnames
objectClass: top
cn: update dns entries
description: Update DNS entries
-member: cn=dnsadmin,cn=privileges,cn=accounts,$SUFFIX
-member: cn=dnsserver,cn=privileges,cn=accounts,$SUFFIX
+member: cn=dnsadmin,cn=privileges,cn=pbac,$SUFFIX
+member: cn=dnsserver,cn=privileges,cn=pbac,$SUFFIX
dn: $SUFFIX
changetype: modify
add: aci
-aci: (target = "ldap:///idnsname=*,cn=dns,$SUFFIX")(version 3.0;acl "Add DNS entries";allow (add) groupdn = "ldap:///cn=add dns entries,cn=permissions,cn=accounts,$SUFFIX";)
-aci: (target = "ldap:///idnsname=*,cn=dns,$SUFFIX")(version 3.0;acl "Remove DNS entries";allow (delete) groupdn = "ldap:///cn=remove dns entries,cn=permissions,cn=accounts,$SUFFIX";)
-aci: (targetattr = "idnsname || cn || idnsallowdynupdate || dnsttl || dnsclass || arecord || aaaarecord || a6record || nsrecord || cnamerecord || ptrrecord || srvrecord || txtrecord || mxrecord || mdrecord || hinforecord || minforecord || afsdbrecord || sigrecord || keyrecord || locrecord || nxtrecord || naptrrecord || kxrecord || certrecord || dnamerecord || dsrecord || sshfprecord || rrsigrecord || nsecrecord || idnsname || idnszoneactive || idnssoamname || idnssoarname || idnssoaserial || idnssoarefresh || idnssoaretry || idnssoaexpire || idnssoaminimum || idnsupdatepolicy")(target = "ldap:///idnsname=*,cn=dns,$SUFFIX")(version 3.0;acl "Update DNS entries";allow (write) groupdn = "ldap:///cn=update dns entries,cn=permissions,cn=accounts,$SUFFIX";)
+aci: (target = "ldap:///idnsname=*,cn=dns,$SUFFIX")(version 3.0;acl "Add DNS entries";allow (add) groupdn = "ldap:///cn=add dns entries,cn=permissions,cn=pbac,$SUFFIX";)
+aci: (target = "ldap:///idnsname=*,cn=dns,$SUFFIX")(version 3.0;acl "Remove DNS entries";allow (delete) groupdn = "ldap:///cn=remove dns entries,cn=permissions,cn=pbac,$SUFFIX";)
+aci: (targetattr = "idnsname || cn || idnsallowdynupdate || dnsttl || dnsclass || arecord || aaaarecord || a6record || nsrecord || cnamerecord || ptrrecord || srvrecord || txtrecord || mxrecord || mdrecord || hinforecord || minforecord || afsdbrecord || sigrecord || keyrecord || locrecord || nxtrecord || naptrrecord || kxrecord || certrecord || dnamerecord || dsrecord || sshfprecord || rrsigrecord || nsecrecord || idnsname || idnszoneactive || idnssoamname || idnssoarname || idnssoaserial || idnssoarefresh || idnssoaretry || idnssoaexpire || idnssoaminimum || idnsupdatepolicy")(target = "ldap:///idnsname=*,cn=dns,$SUFFIX")(version 3.0;acl "Update DNS entries";allow (write) groupdn = "ldap:///cn=update dns entries,cn=permissions,cn=pbac,$SUFFIX";)
-dn: cn=dnsadmin,cn=privileges,cn=accounts,$SUFFIX
+dn: cn=dnsadmin,cn=privileges,cn=pbac,$SUFFIX
changetype: add
objectClass: top
objectClass: groupofnames
@@ -46,7 +46,7 @@ objectClass: nestedgroup
cn: dnsadmin
description: DNS Administrators
-dn: cn=dnsserver,cn=privileges,cn=accounts,$SUFFIX
+dn: cn=dnsserver,cn=privileges,cn=pbac,$SUFFIX
changetype: add
objectClass: top
objectClass: groupofnames