summaryrefslogtreecommitdiffstats
path: root/ipa-server/ipaserver/dsinstance.py
diff options
context:
space:
mode:
authorSimo Sorce <ssorce@redhat.com>2008-05-22 17:55:27 -0400
committerSimo Sorce <ssorce@redhat.com>2008-05-23 15:07:37 -0400
commit3931d1d753289630d0a4199b6100302ddca2bd47 (patch)
tree7745305ed9b96d728d8c8c2f01740d1f5ecaf2be /ipa-server/ipaserver/dsinstance.py
parent0695649926781f0eb34ffd26557d09683d888cfa (diff)
downloadfreeipa-3931d1d753289630d0a4199b6100302ddca2bd47.tar.gz
freeipa-3931d1d753289630d0a4199b6100302ddca2bd47.tar.xz
freeipa-3931d1d753289630d0a4199b6100302ddca2bd47.zip
Move admin into cn=users,cn=accounts
After some deep thinking I think the advantages of keeping all posix enabled user accounts under cn=users,cn=accounts overweight a perceived better protection of the admin account by keeping it in a separate tree.
Diffstat (limited to 'ipa-server/ipaserver/dsinstance.py')
-rw-r--r--ipa-server/ipaserver/dsinstance.py2
1 files changed, 1 insertions, 1 deletions
diff --git a/ipa-server/ipaserver/dsinstance.py b/ipa-server/ipaserver/dsinstance.py
index f0ff2da7b..540ff686f 100644
--- a/ipa-server/ipaserver/dsinstance.py
+++ b/ipa-server/ipaserver/dsinstance.py
@@ -375,7 +375,7 @@ class DsInstance(service.Service):
args = [app,
"-D", "cn=Directory Manager", "-w", self.dm_password,
"-P", dirname+"/cert8.db", "-ZZZ", "-s", password,
- "uid=admin,cn=sysaccounts,cn=etc,"+self.suffix]
+ "uid=admin,cn=users,cn=accounts,"+self.suffix]
try:
ipautil.run(args)
logging.debug("ldappasswd done")