diff options
Diffstat (limited to 'install/share')
| -rw-r--r-- | install/share/delegation.ldif | 9 | ||||
| -rw-r--r-- | install/share/replica-acis.ldif | 5 |
2 files changed, 14 insertions, 0 deletions
diff --git a/install/share/delegation.ldif b/install/share/delegation.ldif index f62062fe..14069586 100644 --- a/install/share/delegation.ldif +++ b/install/share/delegation.ldif @@ -545,6 +545,15 @@ cn: Remove Replication Agreements ipapermissiontype: SYSTEM member: cn=Replication Administrators,cn=privileges,cn=pbac,$SUFFIX +dn: cn=Modify DNA Range,cn=permissions,cn=pbac,$SUFFIX +changetype: add +objectClass: top +objectClass: groupofnames +objectClass: ipapermission +cn: Modify DNA Range +ipapermissiontype: SYSTEM +member: cn=Replication Administrators,cn=privileges,cn=pbac,$SUFFIX + # Entitlement management dn: cn=Register Entitlements,cn=permissions,cn=pbac,$SUFFIX diff --git a/install/share/replica-acis.ldif b/install/share/replica-acis.ldif index 65dfb7a6..f4e96139 100644 --- a/install/share/replica-acis.ldif +++ b/install/share/replica-acis.ldif @@ -20,6 +20,11 @@ changetype: modify add: aci aci: (targetattr=*)(targetfilter="(|(objectclass=nsds5replicationagreement)(objectclass=nsDSWindowsReplicationAgreement))")(version 3.0;acl "permission:Remove Replication Agreements";allow (delete) groupdn = "ldap:///cn=Remove Replication Agreements,cn=permissions,cn=pbac,$SUFFIX";) +dn: cn=Posix IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config +changetype: modify +add: aci +aci: (targetattr=dnaNextRange || dnaNextValue || dnaMaxValue)(version 3.0;acl "permission:Modify DNA Range";allow (write) groupdn = "ldap:///cn=Modify DNA Range,cn=permissions,cn=pbac,$SUFFIX";) + dn: cn=userRoot,cn=ldbm database,cn=plugins,cn=config changetype: modify add: aci |