diff options
author | Rob Crittenden <rcritten@redhat.com> | 2015-05-14 13:08:58 +0000 |
---|---|---|
committer | Jan Cholasta <jcholast@redhat.com> | 2015-06-03 09:47:40 +0000 |
commit | a92328452dced34d6d6df7ad6fe585563bb909f6 (patch) | |
tree | 19d7455b17463f411e0f0ac7cbb94517cb6bc214 /ipatests/test_xmlrpc/objectclasses.py | |
parent | 7f7c247bb5a4b0030d531f4f14c156162e808212 (diff) | |
download | freeipa-a92328452dced34d6d6df7ad6fe585563bb909f6.tar.gz freeipa-a92328452dced34d6d6df7ad6fe585563bb909f6.tar.xz freeipa-a92328452dced34d6d6df7ad6fe585563bb909f6.zip |
Add plugin to manage service constraint delegations
Service Constraints are the delegation model used by
ipa-kdb to grant service A to obtain a TGT for a user
against service B.
https://fedorahosted.org/freeipa/ticket/3644
Reviewed-By: Martin Basti <mbasti@redhat.com>
Diffstat (limited to 'ipatests/test_xmlrpc/objectclasses.py')
-rw-r--r-- | ipatests/test_xmlrpc/objectclasses.py | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/ipatests/test_xmlrpc/objectclasses.py b/ipatests/test_xmlrpc/objectclasses.py index 9a69cf3fd..a5c1b4c50 100644 --- a/ipatests/test_xmlrpc/objectclasses.py +++ b/ipatests/test_xmlrpc/objectclasses.py @@ -201,3 +201,14 @@ idoverridegroup = [ u'top', u'ipaGroupOverride', ] + +servicedelegationrule = [ + u'top', + u'groupofprincipals', + u'ipakrb5delegationacl', +] + +servicedelegationtarget = [ + u'top', + u'groupofprincipals', +] |