diff options
Diffstat (limited to 'ipaserver/plugins/service.py')
| -rw-r--r-- | ipaserver/plugins/service.py | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/ipaserver/plugins/service.py b/ipaserver/plugins/service.py index bead94d3f..c44ad7ac2 100644 --- a/ipaserver/plugins/service.py +++ b/ipaserver/plugins/service.py @@ -410,7 +410,7 @@ class service(LDAPObject): 'krbprincipalname', 'krbcanonicalname', 'krbprincipalaliases', 'krbprincipalexpiration', 'krbpasswordexpiration', 'krblastpwdchange', 'ipakrbauthzdata', 'ipakrbprincipalalias', - 'krbobjectreferences', + 'krbobjectreferences', 'krbprincipalauthind', }, }, 'System: Add Services': { @@ -438,7 +438,7 @@ class service(LDAPObject): }, 'System: Modify Services': { 'ipapermright': {'write'}, - 'ipapermdefaultattr': {'usercertificate'}, + 'ipapermdefaultattr': {'usercertificate', 'krbprincipalauthind'}, 'replaces': [ '(targetattr = "usercertificate")(target = "ldap:///krbprincipalname=*,cn=services,cn=accounts,$SUFFIX")(version 3.0;acl "permission:Modify Services";allow (write) groupdn = "ldap:///cn=Modify Services,cn=permissions,cn=pbac,$SUFFIX";)', ], |