mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-24 16:10:02 -06:00
24 lines
951 B
Plaintext
24 lines
951 B
Plaintext
|
# Configuration for Certificate Identity Mapping
|
||
|
|
dn: cn=certmap,$SUFFIX
|
||
|
|
default:objectclass: top
|
||
|
|
default:objectclass: nsContainer
|
||
|
|
default:objectclass: ipaCertMapConfigObject
|
||
|
|
default:cn: certmap
|
||
|
|
default:ipaCertMapPromptUsername: FALSE
|
||
|
|
|
||
|
|
dn: cn=certmaprules,cn=certmap,$SUFFIX
|
||
|
|
default:objectclass: top
|
||
|
|
default:objectclass: nsContainer
|
||
|
|
default:cn: certmaprules
|
||
|
|
|
||
|
|
# Certificate Identity Mapping Administrators
|
||
|
|
dn: cn=Certificate Identity Mapping Administrators,cn=privileges,cn=pbac,$SUFFIX
|
||
|
|
default:objectClass: top
|
||
|
|
default:objectClass: groupofnames
|
||
|
|
default:objectClass: nestedgroup
|
||
|
|
default:cn: Certificate Identity Mapping Administrators
|
||
|
|
default:description: Certificate Identity Mapping Administrators
|
||
|
|
|
||
|
|
dn: $SUFFIX
|
||
|
|
add:aci: (targetattr = "ipacertmapdata")(targattrfilters="add=objectclass:(objectclass=ipacertmapobject)")(version 3.0;acl "selfservice:Users can manage their own X.509 certificate identity mappings";allow (write) userdn = "ldap:///self";)
|