diff options
| author | Nathaniel McCallum <npmccallum@redhat.com> | 2014-01-28 17:11:04 -0500 |
|---|---|---|
| committer | Petr Viktorin <pviktori@redhat.com> | 2014-02-21 10:26:02 +0100 |
| commit | abb63ed9d1027b967b4ac4473433e4eb5a3ff0b9 (patch) | |
| tree | 8b5d0a0adbe5bc71b59037ba982ffc30fb4a10fd /install/updates | |
| parent | 189bdcb95d4d2346ad5859c2717e7b94dcca018b (diff) | |
| download | freeipa.git-abb63ed9d1027b967b4ac4473433e4eb5a3ff0b9.tar.gz freeipa.git-abb63ed9d1027b967b4ac4473433e4eb5a3ff0b9.tar.xz freeipa.git-abb63ed9d1027b967b4ac4473433e4eb5a3ff0b9.zip | |
Add HOTP support
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Diffstat (limited to 'install/updates')
| -rw-r--r-- | install/updates/40-otp.update | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/install/updates/40-otp.update b/install/updates/40-otp.update index 8e1300fb..ba9be5f0 100644 --- a/install/updates/40-otp.update +++ b/install/updates/40-otp.update @@ -8,6 +8,7 @@ add: aci:'(targetfilter = "(objectClass=ipaToken)")(targetattrs = "objectclass | add: aci:'(targetfilter = "(objectClass=ipaToken)")(targetattrs = "ipatokenUniqueID || description || ipatokenOwner || ipatokenNotBefore || ipatokenNotAfter || ipatokenVendor || ipatokenModel || ipatokenSerial")(version 3.0; acl "Users can write basic token info"; allow (write) userattr = "ipatokenOwner#USERDN";)' add: aci:'(targetfilter = "(objectClass=ipatokenTOTP)")(targetattrs = "ipatokenOTPkey || ipatokenOTPalgorithm || ipatokenOTPdigits || ipatokenTOTPclockOffset || ipatokenTOTPtimeStep")(version 3.0; acl "Users can add TOTP token secrets"; allow (write, search) userattr = "ipatokenOwner#USERDN";)' add: aci:'(target = "ldap:///ipatokenuniqueid=*,cn=otp,$SUFFIX")(targetfilter = "(objectClass=ipaToken)")(version 3.0; acl "Users can create and delete tokens"; allow (add, delete) userattr = "ipatokenOwner#SELFDN";)' +add: aci:'(targetfilter = "(objectClass=ipatokenHOTP)")(targetattrs = "ipatokenOTPkey || ipatokenOTPalgorithm || ipatokenOTPdigits || ipatokenHOTPcounter")(version 3.0; acl "Users can add HOTP token secrets"; allow (write, search) userattr = "ipatokenOwner#USERDN";)' dn: cn=radiusproxy,$SUFFIX default: objectClass: nsContainer |