From 3931d1d753289630d0a4199b6100302ddca2bd47 Mon Sep 17 00:00:00 2001 From: Simo Sorce Date: Thu, 22 May 2008 17:55:27 -0400 Subject: Move admin into cn=users,cn=accounts After some deep thinking I think the advantages of keeping all posix enabled user accounts under cn=users,cn=accounts overweight a perceived better protection of the admin account by keeping it in a separate tree. --- ipa-server/ipaserver/dsinstance.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'ipa-server/ipaserver/dsinstance.py') diff --git a/ipa-server/ipaserver/dsinstance.py b/ipa-server/ipaserver/dsinstance.py index f0ff2da7..540ff686 100644 --- a/ipa-server/ipaserver/dsinstance.py +++ b/ipa-server/ipaserver/dsinstance.py @@ -375,7 +375,7 @@ class DsInstance(service.Service): args = [app, "-D", "cn=Directory Manager", "-w", self.dm_password, "-P", dirname+"/cert8.db", "-ZZZ", "-s", password, - "uid=admin,cn=sysaccounts,cn=etc,"+self.suffix] + "uid=admin,cn=users,cn=accounts,"+self.suffix] try: ipautil.run(args) logging.debug("ldappasswd done") -- cgit