freeipa/install/share/kerberos.ldif

#kerberos user
dn: uid=kdc,cn=sysaccounts,cn=etc,$SUFFIX
changetype: add
objectclass: account
objectclass: simplesecurityobject
uid: kdc
userPassword: $PASSWORD
passwordExpirationTime: 20380119031407Z
nsIdleTimeout: 0

#kerberos base object
dn: cn=kerberos,$SUFFIX
changetype: add
objectClass: krbContainer
objectClass: top
cn: kerberos
aci: (targetattr="*")(version 3.0; acl "KDC System Account"; allow (all) userdn= "ldap:///uid=kdc,cn=sysaccounts,cn=etc,$SUFFIX";)
Added krbinstance to configure the kerberos server Added/Modified ldif files to add the needed schemas and basic DIT, SASL configuration and ACLs Added tenmpate files foir kerberos configuration Added required packages section to README Minor mods to dsinstance Untested! 2007-06-28 18:09:54 -05:00			`#kerberos user`
Finalize DIT, this is waht we are probably going to have in the end, or something very close to this one Add default groups and admin user TODO: need to discuss more in deep uid/gid generation, this will probably change as soon as the DNA plugin is activated 2007-08-29 17:07:05 -05:00			`dn: uid=kdc,cn=sysaccounts,cn=etc,$SUFFIX`
Added krbinstance to configure the kerberos server Added/Modified ldif files to add the needed schemas and basic DIT, SASL configuration and ACLs Added tenmpate files foir kerberos configuration Added required packages section to README Minor mods to dsinstance Untested! 2007-06-28 18:09:54 -05:00			`changetype: add`
			`objectclass: account`
			`objectclass: simplesecurityobject`
			`uid: kdc`
			`userPassword: $PASSWORD`
Put some safeguards against misconfiguration on the kdc account Ticket: https://fedorahosted.org/freeipa/ticket/862 2011-01-27 14:15:19 -06:00			`passwordExpirationTime: 20380119031407Z`
			`nsIdleTimeout: 0`
Added krbinstance to configure the kerberos server Added/Modified ldif files to add the needed schemas and basic DIT, SASL configuration and ACLs Added tenmpate files foir kerberos configuration Added required packages section to README Minor mods to dsinstance Untested! 2007-06-28 18:09:54 -05:00
Finalize DIT, this is waht we are probably going to have in the end, or something very close to this one Add default groups and admin user TODO: need to discuss more in deep uid/gid generation, this will probably change as soon as the DNA plugin is activated 2007-08-29 17:07:05 -05:00			`#kerberos base object`
			`dn: cn=kerberos,$SUFFIX`
			`changetype: add`
			`objectClass: krbContainer`
			`objectClass: top`
			`cn: kerberos`
			`aci: (targetattr="*")(version 3.0; acl "KDC System Account"; allow (all) userdn= "ldap:///uid=kdc,cn=sysaccounts,cn=etc,$SUFFIX";)`