diff options
author | Fraser Tweedale <ftweedal@redhat.com> | 2015-08-04 01:13:09 -0400 |
---|---|---|
committer | Martin Basti <mbasti@redhat.com> | 2015-08-14 14:02:05 +0200 |
commit | 6fa14fd21e664925268d80a2263c556b2bc35139 (patch) | |
tree | 7bf4d8ad5dfaa8b94f3086752b5ba475e0d4383c /VERSION | |
parent | 6b978d74ae36f377c2d4f2cae860ca79b102e3c0 (diff) | |
download | freeipa-6fa14fd21e664925268d80a2263c556b2bc35139.tar.gz freeipa-6fa14fd21e664925268d80a2263c556b2bc35139.tar.xz freeipa-6fa14fd21e664925268d80a2263c556b2bc35139.zip |
Add permission for bypassing CA ACL enforcement
Add the "Request Certificate ignoring CA ACLs" permission and
associated ACI, initially assigned to "Certificate Administrators"
privilege.
Update cert-request command to skip CA ACL enforcement when the bind
principal has this permission.
Fixes: https://fedorahosted.org/freeipa/ticket/5099
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
Diffstat (limited to 'VERSION')
0 files changed, 0 insertions, 0 deletions