summaryrefslogtreecommitdiffstats
path: root/install
diff options
context:
space:
mode:
authorTomas Babej <tbabej@redhat.com>2014-06-24 18:24:32 +0200
committerPetr Viktorin <pviktori@redhat.com>2014-06-25 15:01:52 +0200
commitc2e6b74029e08a4eadb7a14a4c711febfc83b5be (patch)
tree9a5ee7c1638cf5f479bf327d3a9c51f3b13fd2f1 /install
parent8f9838c7ef825fe102de82adf0e8f3409d562305 (diff)
downloadfreeipa-c2e6b74029e08a4eadb7a14a4c711febfc83b5be.tar.gz
freeipa-c2e6b74029e08a4eadb7a14a4c711febfc83b5be.tar.xz
freeipa-c2e6b74029e08a4eadb7a14a4c711febfc83b5be.zip
trusts: Allow reading system trust accounts by adtrust agents
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Diffstat (limited to 'install')
-rw-r--r--install/updates/60-trusts.update8
1 files changed, 8 insertions, 0 deletions
diff --git a/install/updates/60-trusts.update b/install/updates/60-trusts.update
index 371bf656f..d55bc94bb 100644
--- a/install/updates/60-trusts.update
+++ b/install/updates/60-trusts.update
@@ -15,6 +15,14 @@ default: objectClass: GroupOfNames
default: objectClass: top
default: cn: adtrust agents
+dn: cn=ADTrust Agents,cn=privileges,cn=pbac,$SUFFIX
+default: objectClass: top
+default: objectClass: groupofnames
+default: objectClass: nestedgroup
+default: cn: ADTrust Agents
+default: description: System accounts able to access trust information
+default: member: cn=adtrust agents,cn=sysaccounts,cn=etc,$SUFFIX
+
dn: cn=trusts,$SUFFIX
default: objectClass: top
default: objectClass: nsContainer