1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
|
{
"error": null,
"id": 6,
"result": {
"result": {
"aci": [
"(targetattr = \"krbMKey\")(version 3.0; acl \"No external access\"; deny (read,write,search,compare) userdn != \"ldap:///uid=kdc,cn=sysaccounts,cn=etc,dc=ipa14,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com\";)"
],
"attributelevelrights": {
"aci": "rscwo",
"cn": "rscwo",
"krbadmservers": "rscwo",
"krbdefaultencsalttypes": "rscwo",
"krbkdcservers": "rscwo",
"krbldapservers": "rscwo",
"krbmaxrenewableage": "rscwo",
"krbmaxticketlife": "rscwo",
"krbmkey": "none",
"krbprinccontainerref": "rscwo",
"krbprincnamingattr": "rscwo",
"krbpwdpolicyreference": "rsc",
"krbpwdservers": "rscwo",
"krbsearchscope": "rscwo",
"krbsubtrees": "rscwo",
"krbsupportedencsalttypes": "rscwo",
"krbticketflags": "rsc",
"krbticketpolicyreference": "rsc",
"krbupenabled": "rsc",
"nsaccountlock": "rscwo",
"objectclass": "rscwo"
},
"cn": [
"IPA14.AYOUNG.BOSTON.DEVEL.REDHAT.COM"
],
"dn": "cn=ipa14.ayoung.boston.devel.redhat.com,cn=kerberos,dc=ipa14,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
"krbdefaultencsalttypes": [
"aes256-cts:special",
"aes128-cts:special",
"des3-hmac-sha1:special",
"arcfour-hmac:special"
],
"krbmaxrenewableage": [
"604800"
],
"krbmaxticketlife": [
"86400"
],
"krbsearchscope": [
"2"
],
"krbsubtrees": [
"dc=ipa14,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
],
"krbsupportedencsalttypes": [
"aes256-cts:normal",
"aes256-cts:special",
"aes128-cts:normal",
"aes128-cts:special",
"des3-hmac-sha1:normal",
"des3-hmac-sha1:special",
"arcfour-hmac:normal",
"arcfour-hmac:special",
"des-hmac-sha1:normal",
"des-cbc-md5:normal",
"des-cbc-crc:normal",
"des-cbc-crc:v4",
"des-cbc-crc:afs3"
],
"objectclass": [
"top",
"krbrealmcontainer",
"krbticketpolicyaux"
]
},
"summary": null,
"value": ""
}
}
|
