From 75f080132421d7f3cfe6f82ab0d446f563a5d7bf Mon Sep 17 00:00:00 2001 From: Tomas Babej Date: Thu, 11 Apr 2013 16:59:41 +0200 Subject: Add nfs:NONE to default PAC types only when needed We need to add nfs:NONE as a default PAC type only if there's no other default PAC type for nfs. Adds a update plugin which determines whether default PAC type for nfs is set and adds nfs:NONE PAC type accordingly. https://fedorahosted.org/freeipa/ticket/3555 --- install/updates/60-trusts.update | 5 ----- 1 file changed, 5 deletions(-) (limited to 'install/updates/60-trusts.update') diff --git a/install/updates/60-trusts.update b/install/updates/60-trusts.update index f63651f7a..1b2511540 100644 --- a/install/updates/60-trusts.update +++ b/install/updates/60-trusts.update @@ -73,11 +73,6 @@ replace:aci:'(targetattr = "userPassword || krbPrincipalKey || sambaLMPassword | dn: cn=ipaConfig,cn=etc,$SUFFIX addifnew: ipaKrbAuthzData: MS-PAC -# Add authorization data type NONE for NFS because the hardcoded default was -# removed. -dn: cn=ipaConfig,cn=etc,$SUFFIX -add: ipaKrbAuthzData: nfs:NONE - # Fix typo in some installs in the spelling of ORDERING. They were added # with a typo which was silently dropped by 389-ds-base, so add in the # proper ordering syntax now. -- cgit