2013-04-11 12:24:46 -05:00
|
|
|
dn: cn=otp,$SUFFIX
|
|
|
|
|
default: objectClass: nsContainer
|
|
|
|
|
default: objectClass: top
|
|
|
|
|
default: cn: otp
|
|
|
|
|
|
|
|
|
|
dn: $SUFFIX
|
|
|
|
|
add: aci:'(targetfilter = "(objectClass=ipaToken)")(targetattrs = "objectclass || ipatokenUniqueID || description || ipatokenOwner || ipatokenNotBefore || ipatokenNotAfter || ipatokenVendor || ipatokenModel || ipatokenSerial")(version 3.0; acl "Users can read basic token info"; allow (read, search, compare) userattr = "ipatokenOwner#USERDN";)'
|
|
|
|
|
add: aci:'(targetfilter = "(objectClass=ipaToken)")(targetattrs = "ipatokenUniqueID || description || ipatokenOwner || ipatokenNotBefore || ipatokenNotAfter || ipatokenVendor || ipatokenModel || ipatokenSerial")(version 3.0; acl "Users can write basic token info"; allow (write) userattr = "ipatokenOwner#USERDN";)'
|
|
|
|
|
add: aci:'(targetfilter = "(objectClass=ipatokenTOTP)")(targetattrs = "ipatokenOTPkey || ipatokenOTPalgorithm || ipatokenOTPdigits || ipatokenTOTPclockOffset || ipatokenTOTPtimeStep")(version 3.0; acl "Users can add TOTP token secrets"; allow (write, search) userattr = "ipatokenOwner#USERDN";)'
|
2014-02-06 10:27:29 -06:00
|
|
|
add: aci:'(target = "ldap:///ipatokenuniqueid=*,cn=otp,$SUFFIX")(targetfilter = "(objectClass=ipaToken)")(version 3.0; acl "Users can create and delete tokens"; allow (add, delete) userattr = "ipatokenOwner#SELFDN";)'
|
2014-01-28 16:11:04 -06:00
|
|
|
add: aci:'(targetfilter = "(objectClass=ipatokenHOTP)")(targetattrs = "ipatokenOTPkey || ipatokenOTPalgorithm || ipatokenOTPdigits || ipatokenHOTPcounter")(version 3.0; acl "Users can add HOTP token secrets"; allow (write, search) userattr = "ipatokenOwner#USERDN";)'
|
2013-11-11 15:58:02 -06:00
|
|
|
|
|
|
|
|
dn: cn=radiusproxy,$SUFFIX
|
|
|
|
|
default: objectClass: nsContainer
|
|
|
|
|
default: objectClass: top
|
|
|
|
|
default: cn: radiusproxy
|
