From e648e03d0c730e07a55f64e9fb49a2f9bdcf6e52 Mon Sep 17 00:00:00 2001
From: Rob Crittenden <rcritten@redhat.com>
Date: Wed, 15 Sep 2010 12:02:10 -0400
Subject: Set ipaUniqueId to be unwritable and add to uniqueness configuration.

We don't want admins messing with this value.

ticket 231
---
 install/share/unique-attributes.ldif | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

(limited to 'install/share/unique-attributes.ldif')

diff --git a/install/share/unique-attributes.ldif b/install/share/unique-attributes.ldif
index 7cc684d8..023e4cad 100644
--- a/install/share/unique-attributes.ldif
+++ b/install/share/unique-attributes.ldif
@@ -52,6 +52,24 @@ nsslapd-pluginVersion: 1.1.0
 nsslapd-pluginVendor: Fedora Project
 nsslapd-pluginDescription: Enforce unique attribute values
 
+dn: cn=ipaUniqueID uniqueness,cn=plugins,cn=config
+changetype: add
+objectClass: top
+objectClass: nsSlapdPlugin
+objectClass: extensibleObject
+cn: netgroup uniqueness
+nsslapd-pluginPath: libattr-unique-plugin
+nsslapd-pluginInitfunc: NSUniqueAttr_Init
+nsslapd-pluginType: preoperation
+nsslapd-pluginEnabled: on
+nsslapd-pluginarg0: ipaUniqueID
+nsslapd-pluginarg1: $SUFFIX
+nsslapd-plugin-depends-on-type: database
+nsslapd-pluginId: NSUniqueAttr
+nsslapd-pluginVersion: 1.1.0
+nsslapd-pluginVendor: Fedora Project
+nsslapd-pluginDescription: Enforce unique attribute values
+
 #dn: cn=uid uniqueness,cn=plugins,cn=config
 #objectClass: top
 #objectClass: nsSlapdPlugin
-- 
cgit