diff options
| author | Petr Viktorin <pviktori@redhat.com> | 2014-04-16 10:27:09 +0200 |
|---|---|---|
| committer | Martin Kosek <mkosek@redhat.com> | 2014-04-24 11:19:51 +0200 |
| commit | 1389567ec58dca310edf679af7903013f0bdaf07 (patch) | |
| tree | 57cd19e6bd75500e897d8d9117d0b97aedad4830 /install/updates/40-automember.update | |
| parent | baa72b68b1336edb28ca833fcc1616fe466fe709 (diff) | |
| download | freeipa-1389567ec58dca310edf679af7903013f0bdaf07.tar.gz freeipa-1389567ec58dca310edf679af7903013f0bdaf07.tar.xz freeipa-1389567ec58dca310edf679af7903013f0bdaf07.zip | |
Extend anonymous read ACI for containers
- Allow cn=etc,$SUFFIX with these exceptions:
- cn=masters,cn=ipa,cn=etc,$SUFFIX
- virtual operations
- cn=replicas,cn=ipa,cn=etc,$SUFFIX
- Disallow anonymous read access to Kerberos password policy
Part of the work for: https://fedorahosted.org/freeipa/ticket/3566
Reviewed-By: Martin Kosek <mkosek@redhat.com>
Diffstat (limited to 'install/updates/40-automember.update')
0 files changed, 0 insertions, 0 deletions