From 37e3bf2a6096ea18f46501bf5f2a51c55e829595 Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Fri, 1 Jul 2011 10:41:42 -0400 Subject: Disallow direct modifications to enrolledBy. This fixes a regression. We don't need to allow enrolledBy to be modified because it gets written in the ipa_enrollment plugin which does internal operations so bypasses acis. https://fedorahosted.org/freeipa/ticket/302 --- install/updates/50-lockout-policy.update | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'install/updates/50-lockout-policy.update') diff --git a/install/updates/50-lockout-policy.update b/install/updates/50-lockout-policy.update index 302ab81c9..a5730709e 100644 --- a/install/updates/50-lockout-policy.update +++ b/install/updates/50-lockout-policy.update @@ -1,4 +1,4 @@ dn: cn=global_policy,cn=$REALM,cn=kerberos,$SUFFIX -replace:krbPwdLockoutDuration:10:600 -replace: krbPwdMaxFailure:3:6 +replace:krbPwdLockoutDuration:10::600 +replace: krbPwdMaxFailure:3::6 -- cgit