summaryrefslogtreecommitdiffstats
path: root/install/updates
diff options
context:
space:
mode:
authorMartin Basti <mbasti@redhat.com>2016-05-04 17:33:52 +0200
committerMartin Basti <mbasti@redhat.com>2016-06-03 15:58:21 +0200
commit29a8615cf36cd46e30c6048ee7e3993532e83005 (patch)
treef62ac0598ba13309460c629d1fd95afe8c050db7 /install/updates
parentfd4386d5c98e4b823a9f05e18c8b0db857bf1284 (diff)
downloadfreeipa-29a8615cf36cd46e30c6048ee7e3993532e83005.tar.gz
freeipa-29a8615cf36cd46e30c6048ee7e3993532e83005.tar.xz
freeipa-29a8615cf36cd46e30c6048ee7e3993532e83005.zip
DNS Locations: Always create DNS related privileges
DNS privileges are important for handling DNS locations which can be created without DNS servers in IPA topology. We will also need this privileges presented for future feature 'External DNS support' https://fedorahosted.org/freeipa/ticket/2008 Reviewed-By: Petr Spacek <pspacek@redhat.com> Reviewed-By: Jan Cholasta <jcholast@redhat.com>
Diffstat (limited to 'install/updates')
-rw-r--r--install/updates/37-locations.update0
-rw-r--r--install/updates/40-delegation.update16
2 files changed, 16 insertions, 0 deletions
diff --git a/install/updates/37-locations.update b/install/updates/37-locations.update
new file mode 100644
index 000000000..e69de29bb
--- /dev/null
+++ b/install/updates/37-locations.update
diff --git a/install/updates/40-delegation.update b/install/updates/40-delegation.update
index f0431b92d..259cbdbda 100644
--- a/install/updates/40-delegation.update
+++ b/install/updates/40-delegation.update
@@ -274,3 +274,19 @@ default:objectClass: groupofnames
default:objectClass: top
default:cn: Vault Administrators
default:description: Vault Administrators
+
+
+# Locations - always create DNS related privileges
+dn: cn=DNS Administrators,cn=privileges,cn=pbac,$SUFFIX
+default:objectClass: top
+default:objectClass: groupofnames
+default:objectClass: nestedgroup
+default:cn: DNS Administrators
+default:description: DNS Administrators
+
+dn: cn=DNS Servers,cn=privileges,cn=pbac,$SUFFIX
+default:objectClass: top
+default:objectClass: groupofnames
+default:objectClass: nestedgroup
+default:cn: DNS Servers
+default:description: DNS Servers