diff options
| author | Petr Viktorin <pviktori@redhat.com> | 2014-06-04 13:54:54 +0200 |
|---|---|---|
| committer | Petr Viktorin <pviktori@redhat.com> | 2014-06-23 12:44:33 +0200 |
| commit | 14e2eb9171c2cebff8efefac824edbe7dce1734c (patch) | |
| tree | ee2053728978e9117e8352ec60f0193130ca95f5 /ipalib | |
| parent | 8a5110305fafcb6d8770ef78cdff164b8ab1bc0c (diff) | |
| download | freeipa-14e2eb9171c2cebff8efefac824edbe7dce1734c.tar.gz freeipa-14e2eb9171c2cebff8efefac824edbe7dce1734c.tar.xz freeipa-14e2eb9171c2cebff8efefac824edbe7dce1734c.zip | |
host permissions: Allow writing attributes needed for automatic enrollment
- userclass
added to existing Modify hosts permission
- usercertificate, userpassword
added to a new permissions
https://fedorahosted.org/freeipa/ticket/4252
Reviewed-By: Martin Kosek <mkosek@redhat.com>
Diffstat (limited to 'ipalib')
| -rw-r--r-- | ipalib/plugins/host.py | 14 |
1 files changed, 13 insertions, 1 deletions
diff --git a/ipalib/plugins/host.py b/ipalib/plugins/host.py index d3911036f..ee858ad27 100644 --- a/ipalib/plugins/host.py +++ b/ipalib/plugins/host.py @@ -342,7 +342,7 @@ class host(LDAPObject): 'ipapermright': {'write'}, 'ipapermdefaultattr': { 'description', 'l', 'nshardwareplatform', 'nshostlocation', - 'nsosversion', 'macaddress', + 'nsosversion', 'macaddress', 'userclass', }, 'replaces': [ '(targetattr = "description || l || nshostlocation || nshardwareplatform || nsosversion")(target = "ldap:///fqdn=*,cn=computers,cn=accounts,$SUFFIX")(version 3.0;acl "permission:Modify Hosts";allow (write) groupdn = "ldap:///cn=Modify Hosts,cn=permissions,cn=pbac,$SUFFIX";)', @@ -356,6 +356,18 @@ class host(LDAPObject): ], 'default_privileges': {'Host Administrators'}, }, + 'System: Manage Host Certificates': { + 'ipapermbindruletype': 'permission', + 'ipapermright': {'write'}, + 'ipapermdefaultattr': {'usercertificate'}, + 'default_privileges': {'Host Administrators', 'Host Enrollment'}, + }, + 'System: Manage Host Enrollment Password': { + 'ipapermbindruletype': 'permission', + 'ipapermright': {'write'}, + 'ipapermdefaultattr': {'userpassword'}, + 'default_privileges': {'Host Administrators', 'Host Enrollment'}, + }, } label = _('Hosts') |