diff options
| author | Pete Rowley <prowley@redhat.com> | 2007-10-29 14:52:19 -0700 |
|---|---|---|
| committer | Pete Rowley <prowley@redhat.com> | 2007-10-29 14:52:19 -0700 |
| commit | 1871e8dbf6d342a089a8f79c58fa6c62b4ad2567 (patch) | |
| tree | 91ce047e48930d3ceb9f32320c0f5843ac4f0d4e | |
| parent | 4f4f947283766af7dac2115c6c7407f059151647 (diff) | |
| download | freeipa-1871e8dbf6d342a089a8f79c58fa6c62b4ad2567.tar.gz freeipa-1871e8dbf6d342a089a8f79c58fa6c62b4ad2567.tar.xz freeipa-1871e8dbf6d342a089a8f79c58fa6c62b4ad2567.zip | |
Add user self service aci
| -rw-r--r-- | ipa-server/ipa-install/share/default-aci.ldif | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/ipa-server/ipa-install/share/default-aci.ldif b/ipa-server/ipa-install/share/default-aci.ldif index edb5b87f..3eee2ae3 100644 --- a/ipa-server/ipa-install/share/default-aci.ldif +++ b/ipa-server/ipa-install/share/default-aci.ldif @@ -8,3 +8,4 @@ aci: (targetattr="krbPrincipalName || krbUPEnabled || krbPrincipalKey || krbTick aci: (targetattr="krbLastSuccessfulAuth || krbLastFailedAuth || krbLoginFailedCount")(version 3.0; acl "KDC System Account"; allow (read, search, compare, write) userdn="ldap:///uid=kdc,cn=sysaccounts,cn=etc,$SUFFIX";) aci: (targetattr="userPassword || krbPrincipalKey ||sambaLMPassword || sambaNTPassword || krbPasswordExpiration || krbPwdHistory || krbLastPwdChange")(version 3.0; acl "Kpasswd access to passowrd hashes for passowrd changes"; allow (read, write) userdn="ldap:///krbprincipalname=kadmin/changepw@$REALM,cn=$REALM,cn=kerberos,$SUFFIX";) aci: (targetfilter="(|(objectClass=person)(objectClass=krbPrincipalAux)(objectClass=posixAccount)(objectClass=groupOfUniqueNames)(objectClass=posixGroup))")(targetattr="*")(version 3.0; acl "Account Admins can manage Users and Groups"; allow (add,delete,read,write) groupdn="ldap:///cn=admins,cn=groups,cn=accounts,$SUFFIX";) +aci: (targetattr = "givenName || sn || cn || displayName || initials || loginShell || homePhone || mobile || pager || facsimileTelephoneNumber || telephoneNumber || street || roomNumber || l || st || postalCode || manager || description || carLicense || labeledURI || inetUserHTTPURL || seeAlso || userPassword")(version 3.0;acl "Self service";allow (write) userdn="ldap:///self";) |