mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-24 16:10:02 -06:00
861aa9c1b8
This gives the root user low privileges so that when anonymous searches are denied the init scripts can still search the directory via ldapi to get the list of serevices to start. Fixes: https://fedorahosted.org/freeipa/ticket/795
25 lines
465 B
Plaintext
25 lines
465 B
Plaintext
# root-autobind, config
|
|
dn: cn=root-autobind,cn=config
|
|
changetype: add
|
|
objectClass: extensibleObject
|
|
objectClass: top
|
|
cn: root-autobind
|
|
uidNumber: 0
|
|
gidNumber: 0
|
|
|
|
dn: cn=config
|
|
changetype: modify
|
|
replace: nsslapd-ldapiautobind
|
|
nsslapd-ldapiautobind: on
|
|
|
|
dn: cn=config
|
|
changetype: modify
|
|
replace: nsslapd-ldapimaptoentries
|
|
nsslapd-ldapimaptoentries: on
|
|
|
|
dn: cn=config
|
|
changetype: modify
|
|
replace: nsslapd-ldapientrysearchbase
|
|
nsslapd-ldapientrysearchbase: cn=config
|
|
|