mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-26 00:41:25 -06:00
11 lines
462 B
Plaintext
11 lines
462 B
Plaintext
|
dn: krbPrincipalName=WELLKNOWN/ANONYMOUS@$REALM,cn=$REALM,cn=kerberos,$SUFFIX
|
||
|
|
changetype: modify
|
||
|
|
add: objectclass
|
||
|
|
objectclass: ipaAllowedOperations
|
||
|
|
-
|
||
|
|
add: aci
|
||
|
|
aci: (targetattr="ipaProtectedOperation;read_keys")(version 3.0; acl "Allow to retrieve keytab keys of the anonymous user"; allow(read) userattr="ipaAllowedToPerform;read_keys#GROUPDN";)
|
||
|
|
-
|
||
|
|
add: ipaAllowedToPerform;read_keys
|
||
|
|
ipaAllowedToPerform;read_keys: cn=ipaservers,cn=hostgroups,cn=accounts,$SUFFIX
|