mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-01-13 01:31:56 -06:00
373e9d1cf8
The privilege was added after the permission causing the memberof to not be generated. Add a new task to regenerate memberof for existing PBAC to fix upgrades. https://fedorahosted.org/freeipa/ticket/2058 https://fedorahosted.org/freeipa/ticket/2059 https://fedorahosted.org/freeipa/ticket/2060 https://fedorahosted.org/freeipa/ticket/2061
11 lines
390 B
Plaintext
11 lines
390 B
Plaintext
#
|
|
# This needs to come later in the cycle otherwise the DN sorting is going
|
|
# to cause it to execute before the member attributes are added
|
|
dn: cn=Update PBAC memberOf $TIME, cn=memberof task, cn=tasks, cn=config
|
|
add: objectClass: top
|
|
add: objectClass: extensibleObject
|
|
add: cn: IPA PBAC memberOf $TIME
|
|
add: basedn: 'cn=privileges,cn=pbac,$SUFFIX'
|
|
add: filter: (objectclass=*)
|
|
add: ttl: 10
|