summaryrefslogtreecommitdiffstats
path: root/install/share
diff options
context:
space:
mode:
authorSimo Sorce <ssorce@redhat.com>2011-01-19 15:17:25 -0500
committerSimo Sorce <ssorce@redhat.com>2011-01-20 15:49:30 -0500
commit861aa9c1b8ddf757b358f3a66e3ca57d4cc05b4c (patch)
tree50e0025b2cdc32721bca357102daf4935e712c01 /install/share
parent5af80a7583edfd0061a70abde4868d4582247608 (diff)
downloadfreeipa-861aa9c1b8ddf757b358f3a66e3ca57d4cc05b4c.tar.gz
freeipa-861aa9c1b8ddf757b358f3a66e3ca57d4cc05b4c.tar.xz
freeipa-861aa9c1b8ddf757b358f3a66e3ca57d4cc05b4c.zip
Allow SASL/EXTERNAL authentication for the root user
This gives the root user low privileges so that when anonymous searches are denied the init scripts can still search the directory via ldapi to get the list of serevices to start. Fixes: https://fedorahosted.org/freeipa/ticket/795
Diffstat (limited to 'install/share')
-rw-r--r--install/share/Makefile.am1
-rw-r--r--install/share/root-autobind.ldif24
2 files changed, 25 insertions, 0 deletions
diff --git a/install/share/Makefile.am b/install/share/Makefile.am
index 0fb5c8961..4527a922c 100644
--- a/install/share/Makefile.am
+++ b/install/share/Makefile.am
@@ -47,6 +47,7 @@ app_DATA = \
uuid-ipauniqueid.ldif \
modrdn-krbprinc.ldif \
entryusn.ldif \
+ root-autobind.ldif \
$(NULL)
EXTRA_DIST = \
diff --git a/install/share/root-autobind.ldif b/install/share/root-autobind.ldif
new file mode 100644
index 000000000..e7bbc8dbe
--- /dev/null
+++ b/install/share/root-autobind.ldif
@@ -0,0 +1,24 @@
+# root-autobind, config
+dn: cn=root-autobind,cn=config
+changetype: add
+objectClass: extensibleObject
+objectClass: top
+cn: root-autobind
+uidNumber: 0
+gidNumber: 0
+
+dn: cn=config
+changetype: modify
+replace: nsslapd-ldapiautobind
+nsslapd-ldapiautobind: on
+
+dn: cn=config
+changetype: modify
+replace: nsslapd-ldapimaptoentries
+nsslapd-ldapimaptoentries: on
+
+dn: cn=config
+changetype: modify
+replace: nsslapd-ldapientrysearchbase
+nsslapd-ldapientrysearchbase: cn=config
+