summaryrefslogtreecommitdiffstats
path: root/install/share/replica-acis.ldif
diff options
context:
space:
mode:
authorSimo Sorce <ssorce@redhat.com>2010-12-20 10:05:17 -0500
committerSimo Sorce <ssorce@redhat.com>2010-12-21 17:28:13 -0500
commit91f3e79d81671441bbf7c187d1415d864f80d101 (patch)
treef6a98d08b07cd7bccefbb2e4dfdc9a961d33a0c5 /install/share/replica-acis.ldif
parentefd8b03ccfc5ba25c383eacafa948aa0aa5feddf (diff)
downloadfreeipa-91f3e79d81671441bbf7c187d1415d864f80d101.tar.gz
freeipa-91f3e79d81671441bbf7c187d1415d864f80d101.tar.xz
freeipa-91f3e79d81671441bbf7c187d1415d864f80d101.zip
Remove referrals when removing agreements
Part of this fix requires also giving proper permission to change the replication agreements root. While there also fix replica-related permissions to have the classic add/modify/remove triplet of permissions. Fixes: https://fedorahosted.org/freeipa/ticket/630
Diffstat (limited to 'install/share/replica-acis.ldif')
-rw-r--r--install/share/replica-acis.ldif10
1 files changed, 8 insertions, 2 deletions
diff --git a/install/share/replica-acis.ldif b/install/share/replica-acis.ldif
index 5ee65dacb..feda1d9b7 100644
--- a/install/share/replica-acis.ldif
+++ b/install/share/replica-acis.ldif
@@ -3,9 +3,15 @@
dn: cn="$SUFFIX",cn=mapping tree,cn=config
changetype: modify
add: aci
-aci: (targetattr=*)(targetfilter="(|(objectclass=nsds5Replica)(objectclass=nsds5replicationagreement)(objectclass=nsDSWindowsReplicationAgreement))")(version 3.0; acl "Manage Replication Agreements"; allow (read, write, search) groupdn = "ldap:///cn=managereplica,cn=permissions,cn=accounts,$SUFFIX";)
+aci: (targetattr=*)(targetfilter="(|(objectclass=nsds5replicationagreement)(objectclass=nsDSWindowsReplicationAgreement))")(version 3.0;acl "Add Replication Agreements";allow (add) groupdn = "ldap:///cn=addreplica,cn=permissions,cn=accounts,$SUFFIX";)
dn: cn="$SUFFIX",cn=mapping tree,cn=config
changetype: modify
add: aci
-aci: (targetattr=*)(targetfilter="(|(objectclass=nsds5replicationagreement)(objectclass=nsDSWindowsReplicationAgreement))")(version 3.0;acl "Delete Replication Agreements";allow (delete) groupdn = "ldap:///cn=deletereplica,cn=permissions,cn=accounts,$SUFFIX";)
+aci: (targetattr=*)(targetfilter="(|(objectclass=nsds5Replica)(objectclass=nsds5replicationagreement)(objectclass=nsDSWindowsReplicationAgreement)(objectClass=nsMappingTree))")(version 3.0; acl "Modify Replication Agreements"; allow (read, write, search) groupdn = "ldap:///cn=modifyreplica,cn=permissions,cn=accounts,$SUFFIX";)
+
+dn: cn="$SUFFIX",cn=mapping tree,cn=config
+changetype: modify
+add: aci
+aci: (targetattr=*)(targetfilter="(|(objectclass=nsds5replicationagreement)(objectclass=nsDSWindowsReplicationAgreement))")(version 3.0;acl "Remove Replication Agreements";allow (delete) groupdn = "ldap:///cn=removereplica,cn=permissions,cn=accounts,$SUFFIX";)
+