summaryrefslogtreecommitdiffstats
path: root/install
diff options
context:
space:
mode:
authorPetr Viktorin <pviktori@redhat.com>2014-03-26 17:11:23 +0100
committerMartin Kosek <mkosek@redhat.com>2014-04-17 12:38:50 +0200
commit1e46c0a36159c990e083f771de2c0a18ecdbc42e (patch)
tree739ce06237657933d13ed09da156bb6ec0b76267 /install
parent81b0e7466d739a61b16c0e79c660a9f85d073c8c (diff)
downloadfreeipa-1e46c0a36159c990e083f771de2c0a18ecdbc42e.tar.gz
freeipa-1e46c0a36159c990e083f771de2c0a18ecdbc42e.tar.xz
freeipa-1e46c0a36159c990e083f771de2c0a18ecdbc42e.zip
Add managed read permissions to automember
Part of the work for: https://fedorahosted.org/freeipa/ticket/3566 Reviewed-By: Martin Kosek <mkosek@redhat.com>
Diffstat (limited to 'install')
-rw-r--r--install/updates/40-delegation.update7
1 files changed, 7 insertions, 0 deletions
diff --git a/install/updates/40-delegation.update b/install/updates/40-delegation.update
index 6ab849bf8..69061ca3d 100644
--- a/install/updates/40-delegation.update
+++ b/install/updates/40-delegation.update
@@ -415,3 +415,10 @@ default:objectClass: groupofnames
default:objectClass: top
default:cn: Kerberos Ticket Policy Readers
default:description: Read global and per-user Kerberos ticket policy
+
+dn: cn=Automember Readers,cn=privileges,cn=pbac,$SUFFIX
+default:objectClass: nestedgroup
+default:objectClass: groupofnames
+default:objectClass: top
+default:cn: Automember Readers
+default:description: Read Automember definitions