IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-01-26 16:16:31 -06:00
Code Issues Packages Projects Releases Wiki Activity

Add aci to make managed netgroups immutable.

Browse Source 
ticket 962
This commit is contained in:
Rob Crittenden 2011-02-17 17:19:24 -05:00
parent 6943acc161
commit 496ab3f738
2 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
install/updates/20-aci.update Normal file
View File

@ -0,0 +1,4 @@
# Don't allow managed netgroups to be modified
dn: cn=ng,cn=alt,$SUFFIX
add:aci: '(targetfilter = "(objectClass=mepManagedEntry)")(targetattr = "*")(version 3.0; acl "Managed netgroups cannot be modified"; deny (write) userdn = "ldap:///all";)'

3
install/updates/Makefile.am
View File

@ -4,13 +4,14 @@ appdir = $(IPA_DATA_DIR)/updates
app_DATA = \
10-RFC2307bis.update \
10-RFC4876.update \
20-aci.update \
20-dna.update \
20-indices.update \
20-nss_ldap.update \
20-replication.update \
20-winsync_index.update \
40-delegation.update \
50-lockout-policy.update \
50-lockout-policy.update \
$(NULL)
EXTRA_DIST = \