diff options
| author | Petr Viktorin <pviktori@redhat.com> | 2014-03-26 17:11:23 +0100 |
|---|---|---|
| committer | Martin Kosek <mkosek@redhat.com> | 2014-04-25 14:06:08 +0200 |
| commit | 223e6dc3f766879220a01f855da627e29f30e385 (patch) | |
| tree | ff2c68fb6d9d679a3f86623e0bbdfc84ae684e42 /ipapython | |
| parent | edee79a32f85da95198fc59eb94f5460d39eb872 (diff) | |
| download | freeipa-223e6dc3f766879220a01f855da627e29f30e385.tar.gz freeipa-223e6dc3f766879220a01f855da627e29f30e385.tar.xz freeipa-223e6dc3f766879220a01f855da627e29f30e385.zip | |
aci-update: Trim the admin write blacklist
These attributes are removed from the blacklist, which means
high-level admins can now modify them:
- krbPrincipalAliases
- krbPrincipalType
- krbPwdPolicyReference
- krbTicketPolicyReference
- krbUPEnabled
- serverHostName
The intention is to only blacklist password attributes and attributes
that are managed by DS plugins.
Also, move the admin ACIs from ldif and trusts.update to aci.update.
Reviewed-By: Martin Kosek <mkosek@redhat.com>
Diffstat (limited to 'ipapython')
0 files changed, 0 insertions, 0 deletions