diff options
| author | Martin Kosek <mkosek@redhat.com> | 2013-10-25 15:22:58 +0200 |
|---|---|---|
| committer | Martin Kosek <mkosek@redhat.com> | 2013-10-25 15:26:51 +0200 |
| commit | cdd2e9caffb568c0915fb335e46c464404b21e26 (patch) | |
| tree | ddfcd5aa5c845b8d8ba01687fe89cc2d1944c216 /ipaserver/install/replication.py | |
| parent | 9a368b6358e77607214a33bedd3f906641bea4e4 (diff) | |
| download | freeipa-cdd2e9caffb568c0915fb335e46c464404b21e26.tar.gz freeipa-cdd2e9caffb568c0915fb335e46c464404b21e26.tar.xz freeipa-cdd2e9caffb568c0915fb335e46c464404b21e26.zip | |
Do not add kadmin/changepw ACIs on new installs
These ACI were needed when FreeIPA had a custom ipa_kpasswd daemon,
now that a standard kadmin is used, ACIs are not needed anymore as
kadmin uses the same driver as the KDC.
The ACIs is not removed on upgrades to avoid breaking older
replicas which may still use FreeIPA version with the ipa_kpasswd
daemon.
https://fedorahosted.org/freeipa/ticket/3987
Diffstat (limited to 'ipaserver/install/replication.py')
0 files changed, 0 insertions, 0 deletions