mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-25 08:21:05 -06:00
9e24918c89
See design http://www.freeipa.org/page/V4/Certificate_Identity_Mapping https://fedorahosted.org/freeipa/ticket/6542 Reviewed-By: Martin Basti <mbasti@redhat.com> Reviewed-By: Jan Cholasta <jcholast@redhat.com> Reviewed-By: David Kupka <dkupka@redhat.com>
24 lines
951 B
Plaintext
24 lines
951 B
Plaintext
# Configuration for Certificate Identity Mapping
|
|
dn: cn=certmap,$SUFFIX
|
|
default:objectclass: top
|
|
default:objectclass: nsContainer
|
|
default:objectclass: ipaCertMapConfigObject
|
|
default:cn: certmap
|
|
default:ipaCertMapPromptUsername: FALSE
|
|
|
|
dn: cn=certmaprules,cn=certmap,$SUFFIX
|
|
default:objectclass: top
|
|
default:objectclass: nsContainer
|
|
default:cn: certmaprules
|
|
|
|
# Certificate Identity Mapping Administrators
|
|
dn: cn=Certificate Identity Mapping Administrators,cn=privileges,cn=pbac,$SUFFIX
|
|
default:objectClass: top
|
|
default:objectClass: groupofnames
|
|
default:objectClass: nestedgroup
|
|
default:cn: Certificate Identity Mapping Administrators
|
|
default:description: Certificate Identity Mapping Administrators
|
|
|
|
dn: $SUFFIX
|
|
add:aci: (targetattr = "ipacertmapdata")(targattrfilters="add=objectclass:(objectclass=ipacertmapobject)")(version 3.0;acl "selfservice:Users can manage their own X.509 certificate identity mappings";allow (write) userdn = "ldap:///self";)
|