[Freeipa-devel] problem with proxy

[Rob Crittenden]

When trying to add a user to a group by proxying I got this error logged 
by FDS:

[07/Sep/2007:16:03:45 -0400] NSACLPlugin - conn=42 op=0 (main): Deny 
proxy on 
entry(cn=admins,cn=groups,cn=accounts,dc=greyoak,dc=com).attr(cn): no 
aci matched the resource
[07/Sep/2007:16:03:45 -0400] NSACLPlugin - conn=42 op=0 (main): Deny 
search on 
entry(cn=admins,cn=groups,cn=accounts,dc=greyoak,dc=com).attr(cn) to 
proxy (uid=rcrit,cn=users,cn=accounts,dc=greyoak,dc=com): error occurred

Looks like the aci's need some tuning.

rob
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20070907/0e3bfc6d/attachment.bin>