aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorBuchan Milne <buchan@mageia.org>2011-02-20 14:49:26 +0000
committerBuchan Milne <buchan@mageia.org>2011-02-20 14:49:26 +0000
commit1ad057cc317d63335b75e73d7924baf6e52c68dc (patch)
treec3f166c9541e123cec1132d3eaf2dbf817a14596
parent2c2bc7898caf656bc541a502415515957e2988cf (diff)
downloadpuppet-1ad057cc317d63335b75e73d7924baf6e52c68dc.tar
puppet-1ad057cc317d63335b75e73d7924baf6e52c68dc.tar.gz
puppet-1ad057cc317d63335b75e73d7924baf6e52c68dc.tar.bz2
puppet-1ad057cc317d63335b75e73d7924baf6e52c68dc.tar.xz
puppet-1ad057cc317d63335b75e73d7924baf6e52c68dc.zip
Give group owner access (read - including search - and write) to owner attribute
-rw-r--r--modules/openldap/templates/mandriva-dit-access.conf2
1 files changed, 1 insertions, 1 deletions
diff --git a/modules/openldap/templates/mandriva-dit-access.conf b/modules/openldap/templates/mandriva-dit-access.conf
index acf22a75..68a2c7f8 100644
--- a/modules/openldap/templates/mandriva-dit-access.conf
+++ b/modules/openldap/templates/mandriva-dit-access.conf
@@ -81,7 +81,7 @@ access to dn.subtree="<%= dc_suffix %>"
# group owner can add/remove/edit members to groups
access to dn.regex="^cn=[^,]+,ou=(System Groups|Group),<%= dc_suffix %>$"
- attrs=member
+ attrs=member,owner
by dnattr=owner write
by group.exact="cn=Account Admins,ou=System Groups,<%= dc_suffix %>" write
by users +scrx