summaryrefslogtreecommitdiffstats
path: root/install/share
diff options
context:
space:
mode:
authorMartin Basti <mbasti@redhat.com>2015-01-06 10:36:06 +0100
committerMartin Kosek <mkosek@redhat.com>2015-01-09 13:30:37 +0100
commitbb405bd9721de205cbc3f640ad2c758acf8ed8d4 (patch)
tree5509536b4aa71ec230768d7f0b6fdd7b85e6bb1e /install/share
parent4f1fdc8f70c1efdb6c6074181d3ecbcb45df001e (diff)
downloadfreeipa-bb405bd9721de205cbc3f640ad2c758acf8ed8d4.tar.gz
freeipa-bb405bd9721de205cbc3f640ad2c758acf8ed8d4.tar.xz
freeipa-bb405bd9721de205cbc3f640ad2c758acf8ed8d4.zip
Fix: Upgrade forwardzones zones after adding newer replica
Patch fixes issue, when forwardzones has not been upgraded after adding replica >=4.0 into topology with IPA 3.x servers. Ticket: https://fedorahosted.org/freeipa/ticket/4818 Reviewed-By: Petr Spacek <pspacek@redhat.com>
Diffstat (limited to 'install/share')
-rw-r--r--install/share/dns.ldif2
1 files changed, 2 insertions, 0 deletions
diff --git a/install/share/dns.ldif b/install/share/dns.ldif
index 2c6050f85..05f5684c3 100644
--- a/install/share/dns.ldif
+++ b/install/share/dns.ldif
@@ -2,8 +2,10 @@ dn: cn=dns,$SUFFIX
changetype: add
objectClass: idnsConfigObject
objectClass: nsContainer
+objectClass: ipaConfigObject
objectClass: top
cn: dns
+ipaConfigString: DNSVersion 1
aci: (targetattr = "*")(version 3.0; acl "Allow read access"; allow (read,search,compare) groupdn = "ldap:///cn=Read DNS Entries,cn=permissions,cn=pbac,$SUFFIX" or userattr = "parent[0,1].managedby#GROUPDN";)
aci: (target = "ldap:///idnsname=*,cn=dns,$SUFFIX")(version 3.0;acl "Add DNS entries in a zone";allow (add) userattr = "parent[1].managedby#GROUPDN";)
aci: (target = "ldap:///idnsname=*,cn=dns,$SUFFIX")(version 3.0;acl "Remove DNS entries from a zone";allow (delete) userattr = "parent[1].managedby#GROUPDN";)