From b7a1401e9dd06c1c8b055295087907e33954a889 Mon Sep 17 00:00:00 2001 From: Tomas Babej Date: Thu, 10 Jul 2014 17:26:25 +0200 Subject: trusts: Make cn=adtrust agents sysaccount nestedgroup Since recent permissions work references this entry, we need to be able to have memberOf attributes created on this entry. Hence we need to include the nestedgroup objectclass. https://fedorahosted.org/freeipa/ticket/4433 Reviewed-By: Jan Cholasta --- install/updates/60-trusts.update | 1 + 1 file changed, 1 insertion(+) diff --git a/install/updates/60-trusts.update b/install/updates/60-trusts.update index d55bc94bb..9dabc806e 100644 --- a/install/updates/60-trusts.update +++ b/install/updates/60-trusts.update @@ -11,6 +11,7 @@ default: nsAccountLock: FALSE default: ipaUniqueID: autogenerate dn: cn=adtrust agents,cn=sysaccounts,cn=etc,$SUFFIX +add: objectClass: nestedgroup default: objectClass: GroupOfNames default: objectClass: top default: cn: adtrust agents -- cgit