diff options
| author | Nathaniel McCallum <npmccallum@redhat.com> | 2016-05-04 17:08:45 -0400 |
|---|---|---|
| committer | Petr Vobornik <pvoborni@redhat.com> | 2016-06-02 19:02:14 +0200 |
| commit | 4ded2ffc161ec649ba1ccf8d0b528d24028080df (patch) | |
| tree | 7e11c36074e610ec4f527dbe9c45854fbc8c0d75 /ipalib/plugins | |
| parent | 5f7433839fa9772d19d81832941158244a54dc53 (diff) | |
| download | freeipa-4ded2ffc161ec649ba1ccf8d0b528d24028080df.tar.gz freeipa-4ded2ffc161ec649ba1ccf8d0b528d24028080df.tar.xz freeipa-4ded2ffc161ec649ba1ccf8d0b528d24028080df.zip | |
Enable service authentication indicator management
https://fedorahosted.org/freeipa/ticket/433
Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Diffstat (limited to 'ipalib/plugins')
| -rw-r--r-- | ipalib/plugins/service.py | 10 |
1 files changed, 9 insertions, 1 deletions
diff --git a/ipalib/plugins/service.py b/ipalib/plugins/service.py index 2d3476e83..ec2071b87 100644 --- a/ipalib/plugins/service.py +++ b/ipalib/plugins/service.py @@ -411,7 +411,7 @@ class service(LDAPObject): permission_filter_objectclasses = ['ipaservice'] search_attributes = ['krbprincipalname', 'managedby', 'ipakrbauthzdata'] default_attributes = ['krbprincipalname', 'usercertificate', 'managedby', - 'ipakrbauthzdata', 'memberof', 'ipaallowedtoperform'] + 'ipakrbauthzdata', 'memberof', 'ipaallowedtoperform', 'krbprincipalauthind'] uuid_attribute = 'ipauniqueid' attribute_members = { 'managedby': ['host'], @@ -505,6 +505,14 @@ class service(LDAPObject): " e.g. this might be necessary for NFS services."), values=(u'MS-PAC', u'PAD', u'NONE'), ), + Str('krbprincipalauthind*', + cli_name='auth_ind', + label=_('Authentication Indicators'), + doc=_("Defines a whitelist for Authentication Indicators." + " Use 'otp' to allow OTP-based 2FA authentications." + " Use 'radius' to allow RADIUS-based 2FA authentications." + " Other values may be used for custom configurations."), + ), ) + ticket_flags_params def validate_ipakrbauthzdata(self, entry): |