summaryrefslogtreecommitdiffstats
path: root/install/share/default-hbac.ldif
diff options
context:
space:
mode:
Diffstat (limited to 'install/share/default-hbac.ldif')
-rw-r--r--install/share/default-hbac.ldif14
1 files changed, 14 insertions, 0 deletions
diff --git a/install/share/default-hbac.ldif b/install/share/default-hbac.ldif
new file mode 100644
index 000000000..541ff0df3
--- /dev/null
+++ b/install/share/default-hbac.ldif
@@ -0,0 +1,14 @@
+# default HBAC policy that grants permission to all services
+dn: ipauniqueid=$UUID,cn=hbac,$SUFFIX
+changetype: add
+objectclass: ipaassociation
+objectclass: ipahbacrule
+cn: allow_all
+accessruletype: allow
+usercategory: all
+hostcategory: all
+sourcehostcategory: all
+ipaenabledflag: TRUE
+description: Allow all users to access any host from any host
+# ipauniqueid gets added for us by 389-ds
+