Add additional pam ftp services to HBAC, and a ftp HBAC service group

This adds proftpd, pure-ftpd, vsftpd and gssftp.

https://fedorahosted.org/freeipa/ticket/1703
This commit is contained in:
Rob Crittenden 2011-08-24 17:28:22 -04:00
parent 950a5da34d
commit a6b3309fe6
2 changed files with 44 additions and 0 deletions

View File

@ -0,0 +1,43 @@
dn: cn=vsftpd,cn=hbacservices,cn=hbac,$SUFFIX
default:objectclass: ipahbacservice
default:objectclass: ipaobject
default:cn: vsftpd
default:description: vsftpd
default:ipauniqueid:autogenerate
dn: cn=proftpd,cn=hbacservices,cn=hbac,$SUFFIX
default:objectclass: ipahbacservice
default:objectclass: ipaobject
default:cn: proftpd
default:description: proftpd
default:ipauniqueid:autogenerate
dn: cn=pure-ftpd,cn=hbacservices,cn=hbac,$SUFFIX
default:objectclass: ipahbacservice
default:objectclass: ipaobject
default:cn: pure-ftpd
default:description: pure-ftpd
default:ipauniqueid:autogenerate
dn: cn=gssftp,cn=hbacservices,cn=hbac,$SUFFIX
default:objectclass: ipahbacservice
default:objectclass: ipaobject
default:cn: gssftp
default:description: gssftp
default:ipauniqueid:autogenerate
dn: cn=ftp,cn=hbacservicegroups,cn=hbac,$SUFFIX
default:objectClass: ipaobject
default:objectClass: ipahbacservicegroup
default:objectClass: nestedGroup
default:objectClass: groupOfNames
default:objectClass: top
default:cn: ftp
default:ipauniqueid:autogenerate
default:description: Default group of ftp related services
default:member: cn=ftp,cn=hbacservices,cn=hbac,$SUFFIX
default:member: cn=proftpd,cn=hbacservices,cn=hbac,$SUFFIX
default:member: cn=pure-ftpd,cn=hbacservices,cn=hbac,$SUFFIX
default:member: cn=vsftpd,cn=hbacservices,cn=hbac,$SUFFIX
default:member: cn=gssftp,cn=hbacservices,cn=hbac,$SUFFIX

View File

@ -21,6 +21,7 @@ app_DATA = \
45-roles.update \
50-lockout-policy.update \
50-groupuuid.update \
50-hbacservice.update \
50-suppress-upg.update \
$(NULL)