diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2011-02-28 11:44:27 -0500 |
|---|---|---|
| committer | Rob Crittenden <rcritten@redhat.com> | 2011-03-01 16:48:35 -0500 |
| commit | 07ba40f33ea4434f11bd3919ad591d3d6acccf6c (patch) | |
| tree | 920ba5cf9f5986e31af69e9fdf0c8514d3cb8b61 /install/updates | |
| parent | 2dd0fb9200421c39a6303f733d56834ffe863483 (diff) | |
| download | freeipa-07ba40f33ea4434f11bd3919ad591d3d6acccf6c.tar.gz freeipa-07ba40f33ea4434f11bd3919ad591d3d6acccf6c.tar.xz freeipa-07ba40f33ea4434f11bd3919ad591d3d6acccf6c.zip | |
Use Sudo rather than SUDO as a label.
ticket 1005
Diffstat (limited to 'install/updates')
| -rw-r--r-- | install/updates/40-delegation.update | 78 | ||||
| -rw-r--r-- | install/updates/45-roles.update | 2 |
2 files changed, 40 insertions, 40 deletions
diff --git a/install/updates/40-delegation.update b/install/updates/40-delegation.update index 32568f92b..aa431e7b7 100644 --- a/install/updates/40-delegation.update +++ b/install/updates/40-delegation.update @@ -102,86 +102,86 @@ add:aci: '(targetattr = "member")(target = "ldap:///cn=*,cn=hbacservicegroups,cn # SUDO -dn: cn=Add SUDO rule,cn=permissions,cn=pbac,$SUFFIX +dn: cn=Add Sudo rule,cn=permissions,cn=pbac,$SUFFIX default:objectClass: groupofnames default:objectClass: ipapermission default:objectClass: top -default:cn: Add SUDO rule -default:member: cn=SUDO Administrator,cn=privileges,cn=pbac,$SUFFIX +default:cn: Add Sudo rule +default:member: cn=Sudo Administrator,cn=privileges,cn=pbac,$SUFFIX -dn: cn=Delete SUDO rule,cn=permissions,cn=pbac,$SUFFIX +dn: cn=Delete Sudo rule,cn=permissions,cn=pbac,$SUFFIX default:objectClass: groupofnames default:objectClass: ipapermission default:objectClass: top -default:cn: Delete SUDO rule -default:member: cn=SUDO Administrator,cn=privileges,cn=pbac,$SUFFIX +default:cn: Delete Sudo rule +default:member: cn=Sudo Administrator,cn=privileges,cn=pbac,$SUFFIX -dn: cn=Modify SUDO rule,cn=permissions,cn=pbac,$SUFFIX +dn: cn=Modify Sudo rule,cn=permissions,cn=pbac,$SUFFIX default:objectClass: groupofnames default:objectClass: ipapermission default:objectClass: top -default:cn: Modify SUDO rule -default:member: cn=SUDO Administrator,cn=privileges,cn=pbac,$SUFFIX +default:cn: Modify Sudo rule +default:member: cn=Sudo Administrator,cn=privileges,cn=pbac,$SUFFIX -dn: cn=Add SUDO command,cn=permissions,cn=pbac,$SUFFIX +dn: cn=Add Sudo command,cn=permissions,cn=pbac,$SUFFIX default:objectClass: groupofnames default:objectClass: ipapermission default:objectClass: top -default:cn: Add SUDO command -default:member: cn=SUDO Administrator,cn=privileges,cn=pbac,$SUFFIX +default:cn: Add Sudo command +default:member: cn=Sudo Administrator,cn=privileges,cn=pbac,$SUFFIX -dn: cn=Delete SUDO command,cn=permissions,cn=pbac,$SUFFIX +dn: cn=Delete Sudo command,cn=permissions,cn=pbac,$SUFFIX default:objectClass: groupofnames default:objectClass: ipapermission default:objectClass: top -default:cn: Delete SUDO command -default:member: cn=SUDO Administrator,cn=privileges,cn=pbac,$SUFFIX +default:cn: Delete Sudo command +default:member: cn=Sudo Administrator,cn=privileges,cn=pbac,$SUFFIX -dn: cn=Modify SUDO command,cn=permissions,cn=pbac,$SUFFIX +dn: cn=Modify Sudo command,cn=permissions,cn=pbac,$SUFFIX default:objectClass: groupofnames default:objectClass: ipapermission default:objectClass: top -default:cn: Modify SUDO command -default:member: cn=SUDO Administrator,cn=privileges,cn=pbac,$SUFFIX +default:cn: Modify Sudo command +default:member: cn=Sudo Administrator,cn=privileges,cn=pbac,$SUFFIX -dn: cn=Add SUDO command group,cn=permissions,cn=pbac,$SUFFIX +dn: cn=Add Sudo command group,cn=permissions,cn=pbac,$SUFFIX default:objectClass: groupofnames default:objectClass: ipapermission default:objectClass: top -default:cn: Add SUDO command group -default:member: cn=SUDO Administrator,cn=privileges,cn=pbac,$SUFFIX +default:cn: Add Sudo command group +default:member: cn=Sudo Administrator,cn=privileges,cn=pbac,$SUFFIX -dn: cn=Delete SUDO command group,cn=permissions,cn=pbac,$SUFFIX +dn: cn=Delete Sudo command group,cn=permissions,cn=pbac,$SUFFIX default:objectClass: groupofnames default:objectClass: ipapermission default:objectClass: top -default:cn: Delete SUDO command group -default:member: cn=SUDO Administrator,cn=privileges,cn=pbac,$SUFFIX +default:cn: Delete Sudo command group +default:member: cn=Sudo Administrator,cn=privileges,cn=pbac,$SUFFIX -dn: cn=Manage SUDO command group membership,cn=permissions,cn=pbac,$SUFFIX +dn: cn=Manage Sudo command group membership,cn=permissions,cn=pbac,$SUFFIX default:objectClass: groupofnames default:objectClass: ipapermission default:objectClass: top -default:cn: Manage SUDO command group membership -default:member: cn=SUDO Administrator,cn=privileges,cn=pbac,$SUFFIX +default:cn: Manage Sudo command group membership +default:member: cn=Sudo Administrator,cn=privileges,cn=pbac,$SUFFIX -dn: cn=SUDO Administrator,cn=privileges,cn=pbac,$SUFFIX +dn: cn=Sudo Administrator,cn=privileges,cn=pbac,$SUFFIX default:objectClass: nestedgroup default:objectClass: groupofnames default:objectClass: top -default:cn: SUDO Administrator -default:description: SUDO Administrator +default:cn: Sudo Administrator +default:description: Sudo Administrator dn: $SUFFIX -add:aci: '(target = "ldap:///ipauniqueid=*,cn=sudorules,cn=sudo,$SUFFIX")(version 3.0;acl "permission:Add SUDO rule";allow (add) groupdn = "ldap:///cn=Add SUDO rule,cn=permissions,cn=pbac,$SUFFIX";)' -add:aci: '(target = "ldap:///ipauniqueid=*,cn=sudorules,cn=sudo,$SUFFIX")(version 3.0;acl "permission:Delete SUDO rule";allow (delete) groupdn = "ldap:///cn=Delete SUDO rule,cn=permissions,cn=pbac,$SUFFIX";)' -add:aci: '(targetattr = "description || ipaenabledflag || usercategory || hostcategory || cmdcategory || ipasudorunasusercategory || ipasudorunasgroupcategory || externaluser || ipasudorunasextuser || ipasudorunasextgroup || memberdenycmd || memberallowcmd || memberuser")(target = "ldap:///ipauniqueid=*,cn=sudorules,cn=sudo,$SUFFIX")(version 3.0;acl "permission:Modify SUDO rule";allow (write) groupdn = "ldap:///cn=Modify SUDO rule,cn=permissions,cn=pbac,$SUFFIX";)' -add:aci: '(targetattr = "description")(target = "ldap:///sudocmd=*,cn=sudocmds,cn=sudo,$SUFFIX")(version 3.0;acl "permission:Modify SUDO command";allow (write) groupdn = "ldap:///cn=Modify SUDO command,cn=permissions,cn=pbac,$SUFFIX";)' -add:aci: '(target = "ldap:///sudocmd=*,cn=sudocmds,cn=sudo,$SUFFIX")(version 3.0;acl "permission:Delete SUDO command";allow (delete) groupdn = "ldap:///cn=Delete SUDO command,cn=permissions,cn=pbac,$SUFFIX";)' -add:aci: '(target = "ldap:///sudocmd=*,cn=sudocmds,cn=sudo,$SUFFIX")(version 3.0;acl "permission:Add SUDO command";allow (add) groupdn = "ldap:///cn=Add SUDO command,cn=permissions,cn=pbac,$SUFFIX";)' -add:aci: '(target = "ldap:///cn=*,cn=sudocmdgroups,cn=sudo,$SUFFIX")(version 3.0;acl "permission:Add SUDO command group";allow (add) groupdn = "ldap:///cn=Add SUDO command group,cn=permissions,cn=pbac,$SUFFIX";)' -add:aci: '(target = "ldap:///cn=*,cn=sudocmdgroups,cn=sudo,$SUFFIX")(version 3.0;acl "permission:Delete SUDO command group";allow (delete) groupdn = "ldap:///cn=Delete SUDO command group,cn=permissions,cn=pbac,$SUFFIX";)' -add:aci: '(targetattr = "member")(target = "ldap:///cn=*,cn=sudocmdgroups,cn=sudo,$SUFFIX")(version 3.0;acl "permission:Manage SUDO command group membership";allow (write) groupdn = "ldap:///cn=Manage SUDO command group membership,cn=permissions,cn=pbac,$SUFFIX";)' +add:aci: '(target = "ldap:///ipauniqueid=*,cn=sudorules,cn=sudo,$SUFFIX")(version 3.0;acl "permission:Add Sudo rule";allow (add) groupdn = "ldap:///cn=Add Sudo rule,cn=permissions,cn=pbac,$SUFFIX";)' +add:aci: '(target = "ldap:///ipauniqueid=*,cn=sudorules,cn=sudo,$SUFFIX")(version 3.0;acl "permission:Delete Sudo rule";allow (delete) groupdn = "ldap:///cn=Delete Sudo rule,cn=permissions,cn=pbac,$SUFFIX";)' +add:aci: '(targetattr = "description || ipaenabledflag || usercategory || hostcategory || cmdcategory || ipasudorunasusercategory || ipasudorunasgroupcategory || externaluser || ipasudorunasextuser || ipasudorunasextgroup || memberdenycmd || memberallowcmd || memberuser")(target = "ldap:///ipauniqueid=*,cn=sudorules,cn=sudo,$SUFFIX")(version 3.0;acl "permission:Modify Sudo rule";allow (write) groupdn = "ldap:///cn=Modify Sudo rule,cn=permissions,cn=pbac,$SUFFIX";)' +add:aci: '(targetattr = "description")(target = "ldap:///sudocmd=*,cn=sudocmds,cn=sudo,$SUFFIX")(version 3.0;acl "permission:Modify Sudo command";allow (write) groupdn = "ldap:///cn=Modify Sudo command,cn=permissions,cn=pbac,$SUFFIX";)' +add:aci: '(target = "ldap:///sudocmd=*,cn=sudocmds,cn=sudo,$SUFFIX")(version 3.0;acl "permission:Delete Sudo command";allow (delete) groupdn = "ldap:///cn=Delete Sudo command,cn=permissions,cn=pbac,$SUFFIX";)' +add:aci: '(target = "ldap:///sudocmd=*,cn=sudocmds,cn=sudo,$SUFFIX")(version 3.0;acl "permission:Add Sudo command";allow (add) groupdn = "ldap:///cn=Add Sudo command,cn=permissions,cn=pbac,$SUFFIX";)' +add:aci: '(target = "ldap:///cn=*,cn=sudocmdgroups,cn=sudo,$SUFFIX")(version 3.0;acl "permission:Add Sudo command group";allow (add) groupdn = "ldap:///cn=Add Sudo command group,cn=permissions,cn=pbac,$SUFFIX";)' +add:aci: '(target = "ldap:///cn=*,cn=sudocmdgroups,cn=sudo,$SUFFIX")(version 3.0;acl "permission:Delete Sudo command group";allow (delete) groupdn = "ldap:///cn=Delete Sudo command group,cn=permissions,cn=pbac,$SUFFIX";)' +add:aci: '(targetattr = "member")(target = "ldap:///cn=*,cn=sudocmdgroups,cn=sudo,$SUFFIX")(version 3.0;acl "permission:Manage Sudo command group membership";allow (write) groupdn = "ldap:///cn=Manage Sudo command group membership,cn=permissions,cn=pbac,$SUFFIX";)' # Password Policy dn: cn=Add Group Password Policy costemplate,cn=permissions,cn=pbac,$SUFFIX diff --git a/install/updates/45-roles.update b/install/updates/45-roles.update index 7c08f667c..04f4be8fd 100644 --- a/install/updates/45-roles.update +++ b/install/updates/45-roles.update @@ -66,7 +66,7 @@ add:member: 'cn=IT Security Specialist,cn=roles,cn=accounts,$SUFFIX' dn: cn=HBAC Administrator,cn=privileges,cn=pbac,$SUFFIX add:member: 'cn=IT Security Specialist,cn=roles,cn=accounts,$SUFFIX' -dn: cn=SUDO administrator,cn=privileges,cn=pbac,$SUFFIX +dn: cn=Sudo administrator,cn=privileges,cn=pbac,$SUFFIX add:member: 'cn=IT Security Specialist,cn=roles,cn=accounts,$SUFFIX' dn: cn=Security Architect,cn=roles,cn=accounts,$SUFFIX |