summaryrefslogtreecommitdiffstats
path: root/install/updates/40-automember.update
diff options
context:
space:
mode:
authorMartin Kosek <mkosek@redhat.com>2011-10-17 13:56:21 +0200
committerMartin Kosek <mkosek@redhat.com>2011-11-29 09:02:06 +0100
commit9cdeabc778c3eaf9e62eee4fc047c2fd1ec58260 (patch)
treed8360f6ca913ea03d98d74dd22a81e67dbd28658 /install/updates/40-automember.update
parent216505d2a066fd0afb8228b7f05089a7f7d5ab19 (diff)
downloadfreeipa-9cdeabc778c3eaf9e62eee4fc047c2fd1ec58260.tar.gz
freeipa-9cdeabc778c3eaf9e62eee4fc047c2fd1ec58260.tar.xz
freeipa-9cdeabc778c3eaf9e62eee4fc047c2fd1ec58260.zip
Enable automember for upgraded servers
automember functionality is depends on predefined data is in LDAP. Since we add it for fresh installs only, automember cannot be used for upgraded servers. Make sure that automember LDAP data is added during upgrade too. https://fedorahosted.org/freeipa/ticket/1992
Diffstat (limited to 'install/updates/40-automember.update')
-rw-r--r--install/updates/40-automember.update22
1 files changed, 22 insertions, 0 deletions
diff --git a/install/updates/40-automember.update b/install/updates/40-automember.update
new file mode 100644
index 000000000..27aa3028e
--- /dev/null
+++ b/install/updates/40-automember.update
@@ -0,0 +1,22 @@
+# Add all supported automember LDAP objects
+dn: cn=Auto Membership Plugin,cn=plugins,cn=config
+addifnew: nsslapd-pluginConfigArea: 'cn=automember,cn=etc,$SUFFIX'
+
+dn: cn=automember,cn=etc,$SUFFIX
+default: objectClass: top
+default: objectClass: nsContainer
+default: cn: automember
+
+dn: cn=Hostgroup,cn=automember,cn=etc,$SUFFIX
+default: objectclass: autoMemberDefinition
+default: cn: Hostgroup
+default: autoMemberScope: cn=computers,cn=accounts,$SUFFIX
+default: autoMemberFilter: objectclass=ipaHost
+default: autoMemberGroupingAttr: member:dn
+
+dn: cn=Group,cn=automember,cn=etc,$SUFFIX
+default: objectclass: autoMemberDefinition
+default: cn: Group
+default: autoMemberScope: cn=users,cn=accounts,$SUFFIX
+default: autoMemberFilter: objectclass=posixAccount
+default: autoMemberGroupingAttr: member:dn