diff options
author | Pavel Zuna <pzuna@redhat.com> | 2010-01-12 16:30:00 +0100 |
---|---|---|
committer | Rob Crittenden <rcritten@redhat.com> | 2010-01-13 13:43:51 -0500 |
commit | 2e22963a2d71647763fefc991c8564361bb0aef4 (patch) | |
tree | cc34be0a8274c6bc0229ba94338c3bb255423acd /install | |
parent | a11436113b37e371d6843d97b4277fba19c02390 (diff) | |
download | freeipa-2e22963a2d71647763fefc991c8564361bb0aef4.tar.gz freeipa-2e22963a2d71647763fefc991c8564361bb0aef4.tar.xz freeipa-2e22963a2d71647763fefc991c8564361bb0aef4.zip |
Add default values for krb ticket policy attributes during installation.
Diffstat (limited to 'install')
-rw-r--r-- | install/share/bootstrap-template.ldif | 2 | ||||
-rw-r--r-- | install/share/default-keytypes.ldif | 6 |
2 files changed, 8 insertions, 0 deletions
diff --git a/install/share/bootstrap-template.ldif b/install/share/bootstrap-template.ldif index c71f15108..ffee8750f 100644 --- a/install/share/bootstrap-template.ldif +++ b/install/share/bootstrap-template.ldif @@ -70,6 +70,7 @@ objectClass: top objectClass: person objectClass: posixaccount objectClass: krbprincipalaux +objectClass: krbticketpolicyaux objectClass: inetuser uid: admin krbPrincipalName: admin@$REALM @@ -165,6 +166,7 @@ ipaUserObjectClasses: inetorgperson ipaUserObjectClasses: inetuser ipaUserObjectClasses: posixaccount ipaUserObjectClasses: krbprincipalaux +ipaUserObjectClasses: krbticketpolicyaux ipaUserObjectClasses: radiusprofile ipaUserObjectClasses: ipaobject ipaDefaultEmailDomain: $DOMAIN diff --git a/install/share/default-keytypes.ldif b/install/share/default-keytypes.ldif index 1d54a0596..8561b98dc 100644 --- a/install/share/default-keytypes.ldif +++ b/install/share/default-keytypes.ldif @@ -11,6 +11,12 @@ krbSupportedEncSaltTypes: des-cbc-md5:normal krbSupportedEncSaltTypes: des-cbc-crc:normal krbSupportedEncSaltTypes: des-cbc-crc:v4 krbSupportedEncSaltTypes: des-cbc-crc:afs3 +- +add: krbMaxTicketLife +krbMaxTicketLife: 86400 +- +add: krbMaxRenewableAge +krbMaxRenewableAge: 604800 #kerberos keytypes dn: cn=$REALM,cn=kerberos,$SUFFIX |