mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-28 01:41:14 -06:00
e123fa6671
Also fix the memberOf attribute for the HBAC services
16 lines
411 B
Plaintext
16 lines
411 B
Plaintext
# default HBAC policy that grants permission to all services
|
|
dn: ipauniqueid=$UUID,cn=hbac,$SUFFIX
|
|
changetype: add
|
|
objectclass: ipaassociation
|
|
objectclass: ipahbacrule
|
|
cn: allow_all
|
|
accessruletype: allow
|
|
usercategory: all
|
|
hostcategory: all
|
|
sourcehostcategory: all
|
|
servicecategory: all
|
|
ipaenabledflag: TRUE
|
|
description: Allow all users to access any host from any host
|
|
# ipauniqueid gets added for us by 389-ds
|
|
|