diff options
Diffstat (limited to 'install/updates')
| -rw-r--r-- | install/updates/40-replication.update | 4 | ||||
| -rw-r--r-- | install/updates/Makefile.am | 1 |
2 files changed, 5 insertions, 0 deletions
diff --git a/install/updates/40-replication.update b/install/updates/40-replication.update new file mode 100644 index 00000000..f9e0496b --- /dev/null +++ b/install/updates/40-replication.update @@ -0,0 +1,4 @@ +# Let a delegated user put the database into read-only mode when deleting +# an agreement. +dn: cn=userRoot,cn=ldbm database,cn=plugins,cn=config +add:aci: '(targetattr=nsslapd-readonly)(version 3.0; acl "Allow marking the database readonly"; allow (write) groupdn = "ldap:///cn=Remove Replication Agreements,cn=permissions,cn=pbac,$SUFFIX";)' diff --git a/install/updates/Makefile.am b/install/updates/Makefile.am index 9e068966..1233126b 100644 --- a/install/updates/Makefile.am +++ b/install/updates/Makefile.am @@ -26,6 +26,7 @@ app_DATA = \ 25-referint.update \ 30-s4u2proxy.update \ 40-delegation.update \ + 40-replication.update \ 40-dns.update \ 40-automember.update \ 45-roles.update \ |