diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2010-05-21 16:27:40 -0400 |
|---|---|---|
| committer | Rob Crittenden <rcritten@redhat.com> | 2010-05-27 10:51:02 -0400 |
| commit | e123fa66719c7f71587383406d3205d17e60f669 (patch) | |
| tree | 3e2031fb473beb913fe58ab8bb236d1aa792d975 /install/share | |
| parent | fe7cb34f76a04e04e4dd0ffe9e1795752b422e26 (diff) | |
| download | freeipa-e123fa66719c7f71587383406d3205d17e60f669.tar.gz freeipa-e123fa66719c7f71587383406d3205d17e60f669.tar.xz freeipa-e123fa66719c7f71587383406d3205d17e60f669.zip | |
Add ipaUniqueID to HBAC services and service groups
Also fix the memberOf attribute for the HBAC services
Diffstat (limited to 'install/share')
| -rw-r--r-- | install/share/60basev2.ldif | 2 | ||||
| -rw-r--r-- | install/share/default-hbac.ldif | 30 |
2 files changed, 1 insertions, 31 deletions
diff --git a/install/share/60basev2.ldif b/install/share/60basev2.ldif index 10edaba61..0112142c2 100644 --- a/install/share/60basev2.ldif +++ b/install/share/60basev2.ldif @@ -42,7 +42,7 @@ objectClasses: (1.3.6.1.1.1.2.16 NAME 'automountMap' DESC 'Automount Map informa objectClasses: (1.3.6.1.1.1.2.17 NAME 'automount' DESC 'Automount information' SUP top STRUCTURAL MUST ( automountKey $ automountInformation ) MAY description X-ORIGIN 'RFC 2307bis' ) attributeTypes: (2.16.840.1.113730.3.8.3.17 NAME 'hostCApolicy' DESC 'Policy on how to treat host requests for cert operations.' EQUALITY caseIgnoreMatch ORDERING caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE X-ORIGIN 'IPA v2' ) objectClasses: (2.16.840.1.113730.3.8.4.9 NAME 'ipaCAaccess' STRUCTURAL MAY (member $ hostCApolicy) X-ORIGIN 'IPA v2' ) -objectClasses: (2.16.840.1.113730.3.8.4.10 NAME 'ipaHBACService' AUXILIARY MUST ( cn ) MAY ( description ) X-ORIGIN 'IPA v2' ) +objectClasses: (2.16.840.1.113730.3.8.4.10 NAME 'ipaHBACService' AUXILIARY MUST ( cn ) MAY ( description $ memberOf ) X-ORIGIN 'IPA v2' ) objectClasses: (2.16.840.1.113730.3.8.4.11 NAME 'ipaHBACServiceGroup' DESC 'IPA HBAC service group object class' SUP nestedGroup STRUCTURAL X-ORIGIN 'IPA v2' ) attributeTypes: (1.3.6.1.4.1.2428.20.0.0 NAME 'dNSTTL' DESC 'An integer denoting time to live' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 ) attributeTypes: (1.3.6.1.4.1.2428.20.0.1 NAME 'dNSClass' DESC 'The class of a resource record' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) diff --git a/install/share/default-hbac.ldif b/install/share/default-hbac.ldif index ecbaeaedd..29ec88838 100644 --- a/install/share/default-hbac.ldif +++ b/install/share/default-hbac.ldif @@ -13,33 +13,3 @@ ipaenabledflag: TRUE description: Allow all users to access any host from any host # ipauniqueid gets added for us by 389-ds -dn: cn=sshd,cn=hbacservices,cn=accounts,$SUFFIX -changetype: add -objectclass: ipahbacservice -cn: sshd -description: sshd - -dn: cn=ftp,cn=hbacservices,cn=accounts,$SUFFIX -changetype: add -objectclass: ipahbacservice -cn: ftp -description: ftp - -dn: cn=sudo,cn=hbacservices,cn=accounts,$SUFFIX -changetype: add -objectclass: ipahbacservice -cn: sudo -description: sudo - -dn: cn=su,cn=hbacservices,cn=accounts,$SUFFIX -changetype: add -objectclass: ipahbacservice -cn: su -description: su - -dn: cn=login,cn=hbacservices,cn=accounts,$SUFFIX -changetype: add -objectclass: ipahbacservice -cn: login -description: login - |