diff options
| -rw-r--r-- | install/updates/10-60basev3.update | 6 | ||||
| -rw-r--r-- | install/updates/Makefile.am | 1 |
2 files changed, 7 insertions, 0 deletions
diff --git a/install/updates/10-60basev3.update b/install/updates/10-60basev3.update new file mode 100644 index 000000000..796eb16ff --- /dev/null +++ b/install/updates/10-60basev3.update @@ -0,0 +1,6 @@ +dn: cn=schema +add:attributeTypes: ( 2.16.840.1.113730.3.8.11.20 NAME 'memberPrincipal' DESC 'Principal names member of a groupOfPrincipals group' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'IPA-v3') +add:attributeTypes: ( 2.16.840.1.113730.3.8.11.21 NAME 'ipaAllowToImpersonate' DESC 'Principals that can be impersonated' SUP distinguishedName X-ORIGIN 'IPA-v3') +add:attributeTypes: ( 2.16.840.1.113730.3.8.11.22 NAME 'ipaAllowedTarget' DESC 'Target principals alowed to get a ticket for' SUP distinguishedName X-ORIGIN 'IPA-v3') +add:objectClasses: (2.16.840.1.113730.3.8.12.6 NAME 'groupOfPrincipals' SUP top AUXILIARY MUST ( cn ) MAY ( memberPrincipal ) X-ORIGIN 'IPA v3' ) +add:objectClasses: (2.16.840.1.113730.3.8.12.7 NAME 'ipaKrb5DelegationACL' SUP groupOfPrincipals STRUCTURAL MAY ( ipaAllowToImpersonate $$ ipaAllowedTarget ) X-ORIGIN 'IPA v3' ) diff --git a/install/updates/Makefile.am b/install/updates/Makefile.am index 840e934b9..c8d4a0548 100644 --- a/install/updates/Makefile.am +++ b/install/updates/Makefile.am @@ -3,6 +3,7 @@ NULL = appdir = $(IPA_DATA_DIR)/updates app_DATA = \ 10-60basev2.update \ + 10-60basev3.update \ 10-RFC2307bis.update \ 10-RFC4876.update \ 10-config.update \ |