From 2d90724a7e3a810b58293eb4930b5c5b5793bd66 Mon Sep 17 00:00:00 2001 From: Sumit Bose Date: Mon, 4 Mar 2013 14:25:43 +0100 Subject: Add NFS specific default for authorization data type Since the hardcoded default fpr the NFS service was removed the default authorization data type is now set in the global server configuration. https://fedorahosted.org/freeipa/ticket/2960 --- install/updates/60-trusts.update | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/install/updates/60-trusts.update b/install/updates/60-trusts.update index cd7a7e355..454ecb745 100644 --- a/install/updates/60-trusts.update +++ b/install/updates/60-trusts.update @@ -71,6 +71,11 @@ replace:aci:'(targetattr = "userPassword || krbPrincipalKey || sambaLMPassword | dn: cn=ipaConfig,cn=etc,$SUFFIX addifnew: ipaKrbAuthzData: MS-PAC +# Add authorization data type NONE for NFS because the hardcoded default was +# removed. +dn: cn=ipaConfig,cn=etc,$SUFFIX +add: ipaKrbAuthzData: nfs:NONE + # Fix typo in some installs in the spelling of ORDERING. They were added # with a typo which was silently dropped by 389-ds-base, so add in the # proper ordering syntax now. -- cgit