diff options
| author | Petr Spacek <pspacek@redhat.com> | 2016-09-28 15:20:43 +0200 |
|---|---|---|
| committer | Martin Basti <mbasti@redhat.com> | 2016-10-11 16:48:47 +0200 |
| commit | f363dfbeed7aeba51d694a60b29389d94c7bda44 (patch) | |
| tree | 7e636ec84978041d17da1ed3809fcffa46c6497e /install/share/dns.ldif | |
| parent | eb75578cbb2447fc2fafb8a79d8500b27e3edff0 (diff) | |
| download | freeipa-f363dfbeed7aeba51d694a60b29389d94c7bda44.tar.gz freeipa-f363dfbeed7aeba51d694a60b29389d94c7bda44.tar.xz freeipa-f363dfbeed7aeba51d694a60b29389d94c7bda44.zip | |
DNS: Support URI resource record type
https://fedorahosted.org/freeipa/ticket/6344
Reviewed-By: Martin Basti <mbasti@redhat.com>
Diffstat (limited to 'install/share/dns.ldif')
| -rw-r--r-- | install/share/dns.ldif | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/install/share/dns.ldif b/install/share/dns.ldif index 6a8524b51..6dfcb29d8 100644 --- a/install/share/dns.ldif +++ b/install/share/dns.ldif @@ -11,7 +11,7 @@ ipaDNSVersion: 2 aci: (targetattr = "*")(version 3.0; acl "Allow read access"; allow (read,search,compare) groupdn = "ldap:///cn=Read DNS Entries,cn=permissions,cn=pbac,$SUFFIX" or userattr = "parent[0,1].managedby#GROUPDN";) aci: (target = "ldap:///idnsname=*,cn=dns,$SUFFIX")(version 3.0;acl "Add DNS entries in a zone";allow (add) userattr = "parent[1].managedby#GROUPDN";) aci: (target = "ldap:///idnsname=*,cn=dns,$SUFFIX")(version 3.0;acl "Remove DNS entries from a zone";allow (delete) userattr = "parent[1].managedby#GROUPDN";) -aci: (targetattr = "a6record || aaaarecord || afsdbrecord || aplrecord || arecord || certrecord || cn || cnamerecord || dhcidrecord || dlvrecord || dnamerecord || dnsclass || dnsttl || dsrecord || hinforecord || hiprecord || idnsallowdynupdate || idnsallowquery || idnsallowsyncptr || idnsallowtransfer || idnsforwarders || idnsforwardpolicy || idnsname || idnssecinlinesigning || idnssoaexpire || idnssoaminimum || idnssoamname || idnssoarefresh || idnssoaretry || idnssoarname || idnssoaserial || idnsupdatepolicy || idnszoneactive || ipseckeyrecord || keyrecord || kxrecord || locrecord || mdrecord || minforecord || mxrecord || naptrrecord || nsecrecord || nsec3paramrecord || nsrecord || nxtrecord || ptrrecord || rprecord || rrsigrecord || sigrecord || spfrecord || srvrecord || sshfprecord || tlsarecord || txtrecord || unknownrecord ")(target = "ldap:///idnsname=*,cn=dns,$SUFFIX")(version 3.0;acl "Update DNS entries in a zone";allow (write) userattr = "parent[0,1].managedby#GROUPDN";) +aci: (targetattr = "a6record || aaaarecord || afsdbrecord || aplrecord || arecord || certrecord || cn || cnamerecord || dhcidrecord || dlvrecord || dnamerecord || dnsclass || dnsttl || dsrecord || hinforecord || hiprecord || idnsallowdynupdate || idnsallowquery || idnsallowsyncptr || idnsallowtransfer || idnsforwarders || idnsforwardpolicy || idnsname || idnssecinlinesigning || idnssoaexpire || idnssoaminimum || idnssoamname || idnssoarefresh || idnssoaretry || idnssoarname || idnssoaserial || idnsupdatepolicy || idnszoneactive || ipseckeyrecord || keyrecord || kxrecord || locrecord || mdrecord || minforecord || mxrecord || naptrrecord || nsecrecord || nsec3paramrecord || nsrecord || nxtrecord || ptrrecord || rprecord || rrsigrecord || sigrecord || spfrecord || srvrecord || sshfprecord || tlsarecord || txtrecord || urirecord || unknownrecord ")(target = "ldap:///idnsname=*,cn=dns,$SUFFIX")(version 3.0;acl "Update DNS entries in a zone";allow (write) userattr = "parent[0,1].managedby#GROUPDN";) dn: cn=servers,cn=dns,$SUFFIX changetype: add |