On 09/18/2014 10:19 AM, David Kupka wrote:
> + 'System: Add krbCanonicalName to a Host': {
> + 'ipapermright': {'write'},
> + 'ipapermdefaultattr': {'krbcanonicalname'},
> + 'default_privileges': {'Host Administrators'},
> + },
Would it make sense to add the krbCanonicalName to "System: Add
krbPrincipalName to a Host" permission as they are semantically connected? I.e.
having one ACI without the other does not make much sense?
Martin
_______________________________________________
Freeipa-devel mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/freeipa-devel
