summaryrefslogtreecommitdiffstats
path: root/install/share
diff options
context:
space:
mode:
authorPavel Zuna <pzuna@redhat.com>2010-01-12 16:30:00 +0100
committerRob Crittenden <rcritten@redhat.com>2010-01-13 13:43:51 -0500
commit2e22963a2d71647763fefc991c8564361bb0aef4 (patch)
treecc34be0a8274c6bc0229ba94338c3bb255423acd /install/share
parenta11436113b37e371d6843d97b4277fba19c02390 (diff)
downloadfreeipa-2e22963a2d71647763fefc991c8564361bb0aef4.tar.gz
freeipa-2e22963a2d71647763fefc991c8564361bb0aef4.tar.xz
freeipa-2e22963a2d71647763fefc991c8564361bb0aef4.zip
Add default values for krb ticket policy attributes during installation.
Diffstat (limited to 'install/share')
-rw-r--r--install/share/bootstrap-template.ldif2
-rw-r--r--install/share/default-keytypes.ldif6
2 files changed, 8 insertions, 0 deletions
diff --git a/install/share/bootstrap-template.ldif b/install/share/bootstrap-template.ldif
index c71f15108..ffee8750f 100644
--- a/install/share/bootstrap-template.ldif
+++ b/install/share/bootstrap-template.ldif
@@ -70,6 +70,7 @@ objectClass: top
objectClass: person
objectClass: posixaccount
objectClass: krbprincipalaux
+objectClass: krbticketpolicyaux
objectClass: inetuser
uid: admin
krbPrincipalName: admin@$REALM
@@ -165,6 +166,7 @@ ipaUserObjectClasses: inetorgperson
ipaUserObjectClasses: inetuser
ipaUserObjectClasses: posixaccount
ipaUserObjectClasses: krbprincipalaux
+ipaUserObjectClasses: krbticketpolicyaux
ipaUserObjectClasses: radiusprofile
ipaUserObjectClasses: ipaobject
ipaDefaultEmailDomain: $DOMAIN
diff --git a/install/share/default-keytypes.ldif b/install/share/default-keytypes.ldif
index 1d54a0596..8561b98dc 100644
--- a/install/share/default-keytypes.ldif
+++ b/install/share/default-keytypes.ldif
@@ -11,6 +11,12 @@ krbSupportedEncSaltTypes: des-cbc-md5:normal
krbSupportedEncSaltTypes: des-cbc-crc:normal
krbSupportedEncSaltTypes: des-cbc-crc:v4
krbSupportedEncSaltTypes: des-cbc-crc:afs3
+-
+add: krbMaxTicketLife
+krbMaxTicketLife: 86400
+-
+add: krbMaxRenewableAge
+krbMaxRenewableAge: 604800
#kerberos keytypes
dn: cn=$REALM,cn=kerberos,$SUFFIX