summaryrefslogtreecommitdiffstats
path: root/install/share
diff options
context:
space:
mode:
authorSimo Sorce <ssorce@redhat.com>2011-02-25 18:23:10 -0500
committerSimo Sorce <ssorce@redhat.com>2011-03-01 11:02:55 -0500
commitb6ca0f210c093805f15177761b13070c6c246b34 (patch)
treea8b3d67799338f76824bac641e2953a50dc4146a /install/share
parent2028695d88cad856d3051abc76fa9254dd3598e2 (diff)
downloadfreeipa-b6ca0f210c093805f15177761b13070c6c246b34.tar.gz
freeipa-b6ca0f210c093805f15177761b13070c6c246b34.tar.xz
freeipa-b6ca0f210c093805f15177761b13070c6c246b34.zip
Fix replica setup using replication admin kerberos credentials
Fixes: https://fedorahosted.org/freeipa/ticket/1022
Diffstat (limited to 'install/share')
-rw-r--r--install/share/replica-acis.ldif5
1 files changed, 5 insertions, 0 deletions
diff --git a/install/share/replica-acis.ldif b/install/share/replica-acis.ldif
index a2f4cc22b..baa621616 100644
--- a/install/share/replica-acis.ldif
+++ b/install/share/replica-acis.ldif
@@ -1,5 +1,10 @@
# Replica administration
+dn: cn=config
+changetype: modify
+add: aci
+aci: (targetattr != aci)(version 3.0; aci "replica admins read access"; allow (read, search, compare) groupdn = "ldap:///cn=Modify Replication Agreements,cn=permissions,cn=pbac,$SUFFIX";)
+
dn: cn="$SUFFIX",cn=mapping tree,cn=config
changetype: modify
add: aci