mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-01-05 22:03:01 -06:00
37e3bf2a60
This fixes a regression. We don't need to allow enrolledBy to be modified because it gets written in the ipa_enrollment plugin which does internal operations so bypasses acis. https://fedorahosted.org/freeipa/ticket/302
3 lines
167 B
Plaintext
3 lines
167 B
Plaintext
dn: cn=UPG Definition,cn=Managed Entries,cn=plugins,cn=config
|
|
replace: originFilter:objectclass=posixAccount::(&(objectclass=posixAccount)(!(description=__no_upg__)))
|