diff options
| author | Fraser Tweedale <ftweedal@redhat.com> | 2015-08-07 03:21:43 -0400 |
|---|---|---|
| committer | Martin Basti <mbasti@redhat.com> | 2015-08-11 17:26:24 +0200 |
| commit | 8685c0d7b2463d0eef05ff351137afcc291621ec (patch) | |
| tree | 75683342bd3443047c4742b83b9966514681612a /ipaserver | |
| parent | ef192fb17be348c526029e8fa5165b9108e1f6da (diff) | |
| download | freeipa-8685c0d7b2463d0eef05ff351137afcc291621ec.tar.gz freeipa-8685c0d7b2463d0eef05ff351137afcc291621ec.tar.xz freeipa-8685c0d7b2463d0eef05ff351137afcc291621ec.zip | |
Fix default CA ACL added during upgrade
The upgrade script is adding the default CA ACL with incorrect
attributes - usercategory=all instead of servicecategory=all. Fix
it to create the correct object.
Fixes: https://fedorahosted.org/freeipa/ticket/5185
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
Diffstat (limited to 'ipaserver')
| -rw-r--r-- | ipaserver/install/server/upgrade.py | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/ipaserver/install/server/upgrade.py b/ipaserver/install/server/upgrade.py index 037127918..692d0c77e 100644 --- a/ipaserver/install/server/upgrade.py +++ b/ipaserver/install/server/upgrade.py @@ -1306,7 +1306,7 @@ def add_default_caacl(ca): if not api.Command.caacl_find()['result']: api.Command.caacl_add(u'hosts_services_caIPAserviceCert', - hostcategory=u'all', usercategory=u'all') + hostcategory=u'all', servicecategory=u'all') api.Command.caacl_add_profile(u'hosts_services_caIPAserviceCert', certprofile=(u'caIPAserviceCert',)) |