diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2010-05-20 13:50:22 -0400 |
|---|---|---|
| committer | Rob Crittenden <rcritten@redhat.com> | 2010-05-27 10:50:44 -0400 |
| commit | de154919a6dc7e2302af62735baa81773bb2b121 (patch) | |
| tree | d2e6ec6807e019af1bfe9ec107672786d24bb6e1 /install | |
| parent | 4ae483600f77cea2449cb63d8298ad8763904068 (diff) | |
| download | freeipa-de154919a6dc7e2302af62735baa81773bb2b121.tar.gz freeipa-de154919a6dc7e2302af62735baa81773bb2b121.tar.xz freeipa-de154919a6dc7e2302af62735baa81773bb2b121.zip | |
Add 'all' serviceCategory to default HBAC group and add some default services
Diffstat (limited to 'install')
| -rw-r--r-- | install/share/default-hbac.ldif | 31 |
1 files changed, 31 insertions, 0 deletions
diff --git a/install/share/default-hbac.ldif b/install/share/default-hbac.ldif index 541ff0df3..ecbaeaedd 100644 --- a/install/share/default-hbac.ldif +++ b/install/share/default-hbac.ldif @@ -8,7 +8,38 @@ accessruletype: allow usercategory: all hostcategory: all sourcehostcategory: all +servicecategory: all ipaenabledflag: TRUE description: Allow all users to access any host from any host # ipauniqueid gets added for us by 389-ds +dn: cn=sshd,cn=hbacservices,cn=accounts,$SUFFIX +changetype: add +objectclass: ipahbacservice +cn: sshd +description: sshd + +dn: cn=ftp,cn=hbacservices,cn=accounts,$SUFFIX +changetype: add +objectclass: ipahbacservice +cn: ftp +description: ftp + +dn: cn=sudo,cn=hbacservices,cn=accounts,$SUFFIX +changetype: add +objectclass: ipahbacservice +cn: sudo +description: sudo + +dn: cn=su,cn=hbacservices,cn=accounts,$SUFFIX +changetype: add +objectclass: ipahbacservice +cn: su +description: su + +dn: cn=login,cn=hbacservices,cn=accounts,$SUFFIX +changetype: add +objectclass: ipahbacservice +cn: login +description: login + |