diff options
| author | Martin Kosek <mkosek@redhat.com> | 2013-10-04 13:48:52 +0200 |
|---|---|---|
| committer | Petr Viktorin <pviktori@redhat.com> | 2013-10-04 14:30:13 +0200 |
| commit | b1451373c4f918621ce06d8144aaa63e1417777c (patch) | |
| tree | 9e3a14ca27dcf691544f8ae8f1d37ca4fc5e1940 /install/updates/40-dns.update | |
| parent | 3a4a7458c72bb70673520a546ba463ec7fc94bcf (diff) | |
| download | freeipa-b1451373c4f918621ce06d8144aaa63e1417777c.tar.gz freeipa-b1451373c4f918621ce06d8144aaa63e1417777c.tar.xz freeipa-b1451373c4f918621ce06d8144aaa63e1417777c.zip | |
Remove faulty DNS memberOf Task
This task was added with a DN colliding with privilege update memberOf
task being run later and caused this task to be ineffective and thus
miss some privilege membership, like "SELinux User Map Administrators"
DNS update plugin do not need to run any task at all as privileges
will be updated later in scope of 55-pbacmemberof.update
https://fedorahosted.org/freeipa/ticket/3877
Diffstat (limited to 'install/updates/40-dns.update')
| -rw-r--r-- | install/updates/40-dns.update | 11 |
1 files changed, 2 insertions, 9 deletions
diff --git a/install/updates/40-dns.update b/install/updates/40-dns.update index 7ad366e60..475a0c05c 100644 --- a/install/updates/40-dns.update +++ b/install/updates/40-dns.update @@ -1,5 +1,6 @@ # Add missing member values to attach permissions to their respective -# privileges and run a memberOf task. +# privileges +# Memberof task is already being run in 55-pbacmemberof.update dn: cn=add dns entries,cn=permissions,cn=pbac,$SUFFIX addifexist:objectclass: ipapermission addifexist:member: 'cn=DNS Administrators,cn=privileges,cn=pbac,$SUFFIX' @@ -18,14 +19,6 @@ addifexist:member: 'cn=DNS Servers,cn=privileges,cn=pbac,$SUFFIX' dn: cn=Write DNS Configuration,cn=permissions,cn=pbac,$SUFFIX addifexist:objectclass: ipapermission -dn: cn=Update PBAC memberOf $TIME, cn=memberof task, cn=tasks, cn=config -add: objectClass: top -add: objectClass: extensibleObject -add: cn: IPA PBAC memberOf $TIME -add: basedn: 'cn=privileges,cn=pbac,$SUFFIX' -add: filter: (objectclass=*) -add: ttl: 10 - # update DNS container dn: cn=dns, $SUFFIX addifexist: objectClass: idnsConfigObject |