diff options
author | Simo Sorce <ssorce@redhat.com> | 2011-02-25 18:23:10 -0500 |
---|---|---|
committer | Simo Sorce <ssorce@redhat.com> | 2011-03-01 11:02:55 -0500 |
commit | b6ca0f210c093805f15177761b13070c6c246b34 (patch) | |
tree | a8b3d67799338f76824bac641e2953a50dc4146a /install/share/replica-acis.ldif | |
parent | 2028695d88cad856d3051abc76fa9254dd3598e2 (diff) | |
download | freeipa-b6ca0f210c093805f15177761b13070c6c246b34.tar.gz freeipa-b6ca0f210c093805f15177761b13070c6c246b34.tar.xz freeipa-b6ca0f210c093805f15177761b13070c6c246b34.zip |
Fix replica setup using replication admin kerberos credentials
Fixes: https://fedorahosted.org/freeipa/ticket/1022
Diffstat (limited to 'install/share/replica-acis.ldif')
-rw-r--r-- | install/share/replica-acis.ldif | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/install/share/replica-acis.ldif b/install/share/replica-acis.ldif index a2f4cc22b..baa621616 100644 --- a/install/share/replica-acis.ldif +++ b/install/share/replica-acis.ldif @@ -1,5 +1,10 @@ # Replica administration +dn: cn=config +changetype: modify +add: aci +aci: (targetattr != aci)(version 3.0; aci "replica admins read access"; allow (read, search, compare) groupdn = "ldap:///cn=Modify Replication Agreements,cn=permissions,cn=pbac,$SUFFIX";) + dn: cn="$SUFFIX",cn=mapping tree,cn=config changetype: modify add: aci |