From 4bbbc11029aae9c29b9da2347ed1e905c885c0fd Mon Sep 17 00:00:00 2001 From: Nathaniel McCallum Date: Tue, 18 Jun 2013 14:21:25 -0400 Subject: Permit reads to ipatokenRadiusProxyUser objects This fixes an outstanding permissions issue from the OTP work. https://fedorahosted.org/freeipa/ticket/3693 --- ipaserver/install/plugins/update_anonymous_aci.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'ipaserver/install/plugins') diff --git a/ipaserver/install/plugins/update_anonymous_aci.py b/ipaserver/install/plugins/update_anonymous_aci.py index 1e75113f..af4196a6 100644 --- a/ipaserver/install/plugins/update_anonymous_aci.py +++ b/ipaserver/install/plugins/update_anonymous_aci.py @@ -35,7 +35,7 @@ class update_anonymous_aci(PostUpdate): aciname = u'Enable Anonymous access' aciprefix = u'none' ldap = self.obj.backend - targetfilter = '(&(!(objectClass=ipaToken))(!(objectClass=ipatokenTOTP))(!(objectClass=ipatokenRadiusProxyUser))(!(objectClass=ipatokenRadiusConfiguration)))' + targetfilter = '(&(!(objectClass=ipaToken))(!(objectClass=ipatokenTOTP))(!(objectClass=ipatokenRadiusConfiguration)))' filter = None (dn, entry_attrs) = ldap.get_entry(api.env.basedn, ['aci']) -- cgit