freeipa/install/updates/41-caacl.update

dn: cn=caacls,cn=ca,$SUFFIX
default: objectClass: nsContainer
default: objectClass: top
default: cn: caacls
Add CA ACL plugin Implement the caacl commands, which are used to indicate which principals may be issued certificates from which (sub-)CAs, using which profiles. At this commit, and until sub-CAs are implemented, all rules refer to the top-level CA (represented as ".") and no ca-ref argument is exposed. Also, during install and upgrade add a default CA ACL that permits certificate issuance for all hosts and services using the profile 'caIPAserviceCert' on the top-level CA. Part of: https://fedorahosted.org/freeipa/ticket/57 Part of: https://fedorahosted.org/freeipa/ticket/4559 Reviewed-By: Martin Basti <mbasti@redhat.com> 2015-05-25 07:39:07 -05:00			`dn: cn=caacls,cn=ca,$SUFFIX`
			`default: objectClass: nsContainer`
			`default: objectClass: top`
			`default: cn: caacls`