[Freeipa-devel] [PATCH] 0507 Allow anonymous read access to containers
Simo Sorce
simo at redhat.com
Thu Apr 3 12:53:31 UTC 2014
On Thu, 2014-04-03 at 13:34 +0200, Petr Viktorin wrote:
> Hello,
> This adds anonymous read access to containers, as discussed in this
> thread:
> https://www.redhat.com/archives/freeipa-devel/2014-March/msg00442.html
>
> Additionally access is granted for $SUFFIX itself with targetfilter
> "(objectclass=domain)", and attributes objectclass, dc, info, nisDomain,
> associatedDomain.
>
> These are raw ACIs, not permission-based ones.
>
Why is this not set in default-aci.ldif as well ?
Simo.
--
Simo Sorce * Red Hat, Inc * New York
More information about the Freeipa-devel
mailing list