IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

Enabling SUDO support

Browse Source 
* Adding a new SUDO schema file
* Adding this new file to the list of targets in make file
* Create SUDO container for sudo rules
* Add default sudo services to HBAC services
* Add default SUDO HBAC service group with two services sudo & sudo-i
* Installing schema

No SUDO rules are created by default by this patch.
This commit is contained in:
Dmitri Pal
2010-09-08 22:44:42 -04:00
committed by Rob Crittenden
parent 5fd09b016b
commit 52af18ec03
5 changed files with 70 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

33
install/updates/30-hbacsvc.update
View File

@@ -12,13 +12,6 @@ default:cn: ftp
default:description: ftp
default:ipauniqueid:$UUID
dn: cn=sudo,cn=hbacservices,cn=accounts,$SUFFIX
default:objectclass: ipahbacservice
default:objectclass: ipaobject
default:cn: sudo
default:description: sudo
default:ipauniqueid:$UUID
dn: cn=su,cn=hbacservices,cn=accounts,$SUFFIX
default:objectclass: ipahbacservice
default:objectclass: ipaobject
@@ -39,3 +32,29 @@ default:objectclass: ipaobject
default:cn: su-l
default:description: su with login shell
default:ipauniqueid:$UUID
dn: cn=sudo,cn=hbacservices,cn=accounts,$SUFFIX
default:objectclass: ipahbacservice
default:objectclass: ipaobject
default:cn: sudo
default:description: sudo
default:ipauniqueid:$UUID
dn: cn=sudo-i,cn=hbacservices,cn=accounts,$SUFFIX
default:objectclass: ipahbacservice
default:objectclass: ipaobject
default:cn: sudo-i
default:description: sudo-i
default:ipauniqueid:$UUID
dn: cn=SUDO,cn=hbacservicegroups,cn=accounts,$SUFFIX
default:objectClass: ipaobject
default:objectClass: ipahbacservicegroup
default:objectClass: nestedGroup
default:objectClass: groupOfNames
default:objectClass: top
default:cn: SUDO
default:ipauniqueid:$UUID
default:description: Default group of SUDO related services
default:member: cn=sudo,cn=hbacservices,cn=accounts,$SUFFIX
default:member: cn=sudo-i,cn=hbacservices,cn=accounts,$SUFFIX