diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2015-05-14 13:08:58 +0000 |
|---|---|---|
| committer | Jan Cholasta <jcholast@redhat.com> | 2015-06-03 09:47:40 +0000 |
| commit | a92328452dced34d6d6df7ad6fe585563bb909f6 (patch) | |
| tree | 19d7455b17463f411e0f0ac7cbb94517cb6bc214 /install | |
| parent | 7f7c247bb5a4b0030d531f4f14c156162e808212 (diff) | |
| download | freeipa-a92328452dced34d6d6df7ad6fe585563bb909f6.tar.gz freeipa-a92328452dced34d6d6df7ad6fe585563bb909f6.tar.xz freeipa-a92328452dced34d6d6df7ad6fe585563bb909f6.zip | |
Add plugin to manage service constraint delegations
Service Constraints are the delegation model used by
ipa-kdb to grant service A to obtain a TGT for a user
against service B.
https://fedorahosted.org/freeipa/ticket/3644
Reviewed-By: Martin Basti <mbasti@redhat.com>
Diffstat (limited to 'install')
| -rw-r--r-- | install/updates/20-indices.update | 9 | ||||
| -rw-r--r-- | install/updates/25-referint.update | 1 |
2 files changed, 10 insertions, 0 deletions
diff --git a/install/updates/20-indices.update b/install/updates/20-indices.update index e6e4888e2..880e73f3b 100644 --- a/install/updates/20-indices.update +++ b/install/updates/20-indices.update @@ -182,3 +182,12 @@ default:nsSystemIndex: false only:nsIndexType: eq only:nsIndexType: pres only:nsIndexType: sub + +dn: cn=ipaallowedtarget,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config +default:cn: ipaallowedtarget +default:ObjectClass: top +default:ObjectClass: nsIndex +default:nsSystemIndex: false +only:nsIndexType: eq +only:nsIndexType: pres +only:nsIndexType: sub diff --git a/install/updates/25-referint.update b/install/updates/25-referint.update index 609eaba74..005cd0376 100644 --- a/install/updates/25-referint.update +++ b/install/updates/25-referint.update @@ -16,3 +16,4 @@ add: referint-membership-attr: ipasudorunas add: referint-membership-attr: ipasudorunasgroup add: referint-membership-attr: ipatokenradiusconfiglink add: referint-membership-attr: ipaassignedidview +add: referint-membership-attr: ipaallowedtarget |