diff options
| author | Petr Viktorin <pviktori@redhat.com> | 2014-04-28 14:23:19 +0200 |
|---|---|---|
| committer | Petr Viktorin <pviktori@redhat.com> | 2014-05-21 09:57:16 +0200 |
| commit | 86f943ca180a72c4cfa3a8a03226f2471a97981b (patch) | |
| tree | 1e387b2e671e58900a0175fc20a05aaaef65fa04 /install/share/replica-acis.ldif | |
| parent | 98102832789412f567a96693dfe27b0e00cc98e5 (diff) | |
| download | freeipa-86f943ca180a72c4cfa3a8a03226f2471a97981b.tar.gz freeipa-86f943ca180a72c4cfa3a8a03226f2471a97981b.tar.xz freeipa-86f943ca180a72c4cfa3a8a03226f2471a97981b.zip | |
Replace "replica admins read access" ACI with a permission
Add a 'Read Replication Agreements' permission to replace
the read ACI for cn=config.
https://fedorahosted.org/freeipa/ticket/3829
Reviewed-By: Martin Kosek <mkosek@redhat.com>
Diffstat (limited to 'install/share/replica-acis.ldif')
| -rw-r--r-- | install/share/replica-acis.ldif | 5 |
1 files changed, 0 insertions, 5 deletions
diff --git a/install/share/replica-acis.ldif b/install/share/replica-acis.ldif index f4e96139f..8c0bc8ec3 100644 --- a/install/share/replica-acis.ldif +++ b/install/share/replica-acis.ldif @@ -1,10 +1,5 @@ # Replica administration -dn: cn=config -changetype: modify -add: aci -aci: (targetattr != aci)(version 3.0; aci "replica admins read access"; allow (read, search, compare) groupdn = "ldap:///cn=Modify Replication Agreements,cn=permissions,cn=pbac,$SUFFIX";) - dn: cn="$SUFFIX",cn=mapping tree,cn=config changetype: modify add: aci |