[Freeipa-devel] [PATCHES] 0532-0533 Extend anonymous read ACI for containers

Fri Apr 18 13:43:06 UTC 2014

On Fri, 2014-04-18 at 13:50 +0200, Petr Viktorin wrote:
> This extends the "Anonymous read access to containers" ACI to cover 
> cn=etc, as discussed in [0].
> 
> A new objectClass is added so we can exclude virtual ops with 
> targetfilter: ipaVirtualOperation (2.16.840.1.113730.3.8.12.23).
> 
> 
> [0] http://www.redhat.com/archives/freeipa-devel/2014-April/msg00319.html
> 

LGTM