Adam Young
07ace112af
Implements the role, privilege, permission, delegation and selfservice entities ui. Targetgroup has been added to the object types. The groups lists need to be filter. The filter is currently hidden, with a hyperlink that reads 'filter' to unhide it. Each keystroke in this filter performs an AJAX request to the server. There are bugs on the server side that block some of the functionality from completing Creating a Permission requires one of 4 target types. The add dialog in this version assumes the user will want to create a filter type. They can change this on the edit page. Most search results come back with the values as arrays, but ACIs seem not to. Search and details both required special code to handle non-arrays. The unit tests now make use of the 'module' aspect of QUnit. This means that future unit test will also need to specify the module. The advantage is that multiple tests can share a common setup and teardown. Bugs that need to be fixed before this works 100% are https://fedorahosted.org/freeipa/ticket/634 https://fedorahosted.org/freeipa/ticket/633
887 lines
30 KiB
JSON
887 lines
30 KiB
JSON
{
|
|
"error": null,
|
|
"id": 0,
|
|
"result": {
|
|
"count": 47,
|
|
"result": [
|
|
{
|
|
"cn": [
|
|
"addusers"
|
|
],
|
|
"description": [
|
|
"Add Users"
|
|
],
|
|
"dn": "cn=addusers,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"useradmin"
|
|
],
|
|
"permissions": [
|
|
"add"
|
|
],
|
|
"type": "user"
|
|
},
|
|
{
|
|
"attrs": [
|
|
"userPassword",
|
|
"krbPrincipalKey",
|
|
"sambaLMPassword",
|
|
"sambaNTPassword",
|
|
"passwordHistory"
|
|
],
|
|
"cn": [
|
|
"change_password"
|
|
],
|
|
"description": [
|
|
"Change a user password"
|
|
],
|
|
"dn": "cn=change_password,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"useradmin"
|
|
],
|
|
"permissions": [
|
|
"write"
|
|
]
|
|
},
|
|
{
|
|
"attrs": [
|
|
"member"
|
|
],
|
|
"cn": [
|
|
"add_user_to_default_group"
|
|
],
|
|
"description": [
|
|
"Add user to default group"
|
|
],
|
|
"dn": "cn=add_user_to_default_group,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"useradmin"
|
|
],
|
|
"permissions": [
|
|
"write"
|
|
],
|
|
"targetgroup": "ldap:///cn=ipausers,cn=groups,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
|
|
},
|
|
{
|
|
"cn": [
|
|
"removeusers"
|
|
],
|
|
"description": [
|
|
"Remove Users"
|
|
],
|
|
"dn": "cn=removeusers,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"useradmin"
|
|
],
|
|
"permissions": [
|
|
"delete"
|
|
],
|
|
"type": "user"
|
|
},
|
|
{
|
|
"attrs": [
|
|
"givenName",
|
|
"sn",
|
|
"cn",
|
|
"displayName",
|
|
"title",
|
|
"initials",
|
|
"loginShell",
|
|
"gecos",
|
|
"homePhone",
|
|
"mobile",
|
|
"pager",
|
|
"facsimileTelephoneNumber",
|
|
"telephoneNumber",
|
|
"street",
|
|
"roomNumber",
|
|
"l",
|
|
"st",
|
|
"postalCode",
|
|
"manager",
|
|
"secretary",
|
|
"description",
|
|
"carLicense",
|
|
"labeledURI",
|
|
"inetUserHTTPURL",
|
|
"seeAlso",
|
|
"employeeType",
|
|
"businessCategory",
|
|
"ou",
|
|
"mepManagedEntry",
|
|
"objectclass"
|
|
],
|
|
"cn": [
|
|
"modifyusers"
|
|
],
|
|
"description": [
|
|
"Modify Users"
|
|
],
|
|
"dn": "cn=modifyusers,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"useradmin"
|
|
],
|
|
"permissions": [
|
|
"write"
|
|
],
|
|
"type": "user"
|
|
},
|
|
{
|
|
"cn": [
|
|
"addgroups"
|
|
],
|
|
"description": [
|
|
"Add Groups"
|
|
],
|
|
"dn": "cn=addgroups,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"groupadmin"
|
|
],
|
|
"permissions": [
|
|
"add"
|
|
],
|
|
"type": "group"
|
|
},
|
|
{
|
|
"cn": [
|
|
"removegroups"
|
|
],
|
|
"description": [
|
|
"Remove Groups"
|
|
],
|
|
"dn": "cn=removegroups,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"groupadmin"
|
|
],
|
|
"permissions": [
|
|
"delete"
|
|
],
|
|
"type": "group"
|
|
},
|
|
{
|
|
"attrs": [
|
|
"cn",
|
|
"description",
|
|
"gidnumber",
|
|
"objectclass",
|
|
"mepManagedBy",
|
|
"ipaUniqueId"
|
|
],
|
|
"cn": [
|
|
"modifygroups"
|
|
],
|
|
"description": [
|
|
"Modify Groups"
|
|
],
|
|
"dn": "cn=modifygroups,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"groupadmin"
|
|
],
|
|
"permissions": [
|
|
"write"
|
|
],
|
|
"type": "group"
|
|
},
|
|
{
|
|
"attrs": [
|
|
"member"
|
|
],
|
|
"cn": [
|
|
"modifygroupmembership"
|
|
],
|
|
"description": [
|
|
"Modify Group membership"
|
|
],
|
|
"dn": "cn=modifygroupmembership,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"groupadmin"
|
|
],
|
|
"permissions": [
|
|
"write"
|
|
],
|
|
"type": "group"
|
|
},
|
|
{
|
|
"cn": [
|
|
"addhosts"
|
|
],
|
|
"description": [
|
|
"Add Hosts"
|
|
],
|
|
"dn": "cn=addhosts,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"hostadmin"
|
|
],
|
|
"permissions": [
|
|
"add"
|
|
],
|
|
"type": "host"
|
|
},
|
|
{
|
|
"cn": [
|
|
"removehosts"
|
|
],
|
|
"description": [
|
|
"Remove Hosts"
|
|
],
|
|
"dn": "cn=removehosts,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"hostadmin"
|
|
],
|
|
"permissions": [
|
|
"delete"
|
|
],
|
|
"type": "host"
|
|
},
|
|
{
|
|
"attrs": [
|
|
"description",
|
|
"l",
|
|
"nshostlocation",
|
|
"nshardwareplatform",
|
|
"nsosversion"
|
|
],
|
|
"cn": [
|
|
"modifyhosts"
|
|
],
|
|
"description": [
|
|
"Modify Hosts"
|
|
],
|
|
"dn": "cn=modifyhosts,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"hostadmin"
|
|
],
|
|
"permissions": [
|
|
"write"
|
|
],
|
|
"type": "host"
|
|
},
|
|
{
|
|
"cn": [
|
|
"addhostgroups"
|
|
],
|
|
"description": [
|
|
"Add Hostgroups"
|
|
],
|
|
"dn": "cn=addhostgroups,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"hostgroupadmin"
|
|
],
|
|
"permissions": [
|
|
"add"
|
|
],
|
|
"type": "hostgroup"
|
|
},
|
|
{
|
|
"cn": [
|
|
"removehostgroups"
|
|
],
|
|
"description": [
|
|
"Remove Hostgroups"
|
|
],
|
|
"dn": "cn=removehostgroups,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"hostgroupadmin"
|
|
],
|
|
"permissions": [
|
|
"delete"
|
|
],
|
|
"type": "hostgroup"
|
|
},
|
|
{
|
|
"attrs": [
|
|
"cn",
|
|
"description"
|
|
],
|
|
"cn": [
|
|
"modifyhostgroups"
|
|
],
|
|
"description": [
|
|
"Modify Hostgroups"
|
|
],
|
|
"dn": "cn=modifyhostgroups,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"hostgroupadmin"
|
|
],
|
|
"permissions": [
|
|
"write"
|
|
],
|
|
"type": "hostgroup"
|
|
},
|
|
{
|
|
"attrs": [
|
|
"member"
|
|
],
|
|
"cn": [
|
|
"modifyhostgroupmembership"
|
|
],
|
|
"description": [
|
|
"Modify Hostgroup membership"
|
|
],
|
|
"dn": "cn=modifyhostgroupmembership,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"hostgroupadmin"
|
|
],
|
|
"permissions": [
|
|
"write"
|
|
],
|
|
"type": "hostgroup"
|
|
},
|
|
{
|
|
"cn": [
|
|
"addservices"
|
|
],
|
|
"description": [
|
|
"Add Services"
|
|
],
|
|
"dn": "cn=addservices,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"serviceadmin"
|
|
],
|
|
"permissions": [
|
|
"add"
|
|
],
|
|
"type": "service"
|
|
},
|
|
{
|
|
"cn": [
|
|
"removeservices"
|
|
],
|
|
"description": [
|
|
"Remove Services"
|
|
],
|
|
"dn": "cn=removeservices,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"serviceadmin"
|
|
],
|
|
"permissions": [
|
|
"delete"
|
|
],
|
|
"type": "service"
|
|
},
|
|
{
|
|
"attrs": [
|
|
"userCertificate"
|
|
],
|
|
"cn": [
|
|
"modifyservices"
|
|
],
|
|
"description": [
|
|
"Modify Services"
|
|
],
|
|
"dn": "cn=modifyservices,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"serviceadmin"
|
|
],
|
|
"permissions": [
|
|
"write"
|
|
],
|
|
"type": "service"
|
|
},
|
|
{
|
|
"cn": [
|
|
"addroles"
|
|
],
|
|
"description": [
|
|
"Add Roles"
|
|
],
|
|
"dn": "cn=addroles,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"delegationadmin"
|
|
],
|
|
"permissions": [
|
|
"add"
|
|
],
|
|
"subtree": "ldap:///cn=*,cn=roles,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
|
|
},
|
|
{
|
|
"cn": [
|
|
"removeroles"
|
|
],
|
|
"description": [
|
|
"Remove Roles"
|
|
],
|
|
"dn": "cn=removeroles,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"delegationadmin"
|
|
],
|
|
"permissions": [
|
|
"delete"
|
|
],
|
|
"subtree": "ldap:///cn=*,cn=roles,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
|
|
},
|
|
{
|
|
"attrs": [
|
|
"cn",
|
|
"description"
|
|
],
|
|
"cn": [
|
|
"modifyroles"
|
|
],
|
|
"description": [
|
|
"Modify Roles"
|
|
],
|
|
"dn": "cn=modifyroles,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"delegationadmin"
|
|
],
|
|
"permissions": [
|
|
"write"
|
|
],
|
|
"subtree": "ldap:///cn=*,cn=roles,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
|
|
},
|
|
{
|
|
"attrs": [
|
|
"member"
|
|
],
|
|
"cn": [
|
|
"modifyrolemembership"
|
|
],
|
|
"description": [
|
|
"Modify Role Group membership"
|
|
],
|
|
"dn": "cn=modifyrolemembership,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"delegationadmin"
|
|
],
|
|
"permissions": [
|
|
"write"
|
|
],
|
|
"subtree": "ldap:///cn=*,cn=roles,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
|
|
},
|
|
{
|
|
"attrs": [
|
|
"member"
|
|
],
|
|
"cn": [
|
|
"modifyprivilegemembership"
|
|
],
|
|
"description": [
|
|
"Modify privilege membership"
|
|
],
|
|
"dn": "cn=modifyprivilegemembership,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"delegationadmin"
|
|
],
|
|
"permissions": [
|
|
"write"
|
|
],
|
|
"subtree": "ldap:///cn=*,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
|
|
},
|
|
{
|
|
"cn": [
|
|
"addautomountmaps"
|
|
],
|
|
"description": [
|
|
"Add Automount maps"
|
|
],
|
|
"dn": "cn=addautomountmaps,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"automountadmin"
|
|
],
|
|
"permissions": [
|
|
"add"
|
|
],
|
|
"subtree": "ldap:///automountmapname=*,cn=automount,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
|
|
},
|
|
{
|
|
"cn": [
|
|
"removeautomountmaps"
|
|
],
|
|
"description": [
|
|
"Remove Automount maps"
|
|
],
|
|
"dn": "cn=removeautomountmaps,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"automountadmin"
|
|
],
|
|
"permissions": [
|
|
"delete"
|
|
],
|
|
"subtree": "ldap:///automountmapname=*,cn=automount,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
|
|
},
|
|
{
|
|
"cn": [
|
|
"addautomountkeys"
|
|
],
|
|
"description": [
|
|
"Add Automount keys"
|
|
],
|
|
"dn": "cn=addautomountkeys,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"automountadmin"
|
|
],
|
|
"permissions": [
|
|
"add"
|
|
],
|
|
"subtree": "ldap:///automountkey=*,automountmapname=*,cn=automount,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
|
|
},
|
|
{
|
|
"cn": [
|
|
"removeautomountkeys"
|
|
],
|
|
"description": [
|
|
"Remove Automount keys"
|
|
],
|
|
"dn": "cn=removeautomountkeys,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"automountadmin"
|
|
],
|
|
"permissions": [
|
|
"delete"
|
|
],
|
|
"subtree": "ldap:///automountkey=*,automountmapname=*,cn=automount,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
|
|
},
|
|
{
|
|
"cn": [
|
|
"addnetgroups"
|
|
],
|
|
"description": [
|
|
"Add netgroups"
|
|
],
|
|
"dn": "cn=addnetgroups,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"netgroupadmin"
|
|
],
|
|
"permissions": [
|
|
"add"
|
|
],
|
|
"type": "netgroup"
|
|
},
|
|
{
|
|
"cn": [
|
|
"removenetgroups"
|
|
],
|
|
"description": [
|
|
"Remove netgroups"
|
|
],
|
|
"dn": "cn=removenetgroups,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"netgroupadmin"
|
|
],
|
|
"permissions": [
|
|
"delete"
|
|
],
|
|
"type": "netgroup"
|
|
},
|
|
{
|
|
"attrs": [
|
|
"description"
|
|
],
|
|
"cn": [
|
|
"modifynetgroups"
|
|
],
|
|
"description": [
|
|
"Modify netgroups"
|
|
],
|
|
"dn": "cn=modifynetgroups,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"netgroupadmin"
|
|
],
|
|
"permissions": [
|
|
"write"
|
|
],
|
|
"type": "netgroup"
|
|
},
|
|
{
|
|
"attrs": [
|
|
"memberhost",
|
|
"externalhost",
|
|
"memberuser",
|
|
"member"
|
|
],
|
|
"cn": [
|
|
"modifynetgroupmembership"
|
|
],
|
|
"description": [
|
|
"Modify netgroup membership"
|
|
],
|
|
"dn": "cn=modifynetgroupmembership,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"netgroupadmin"
|
|
],
|
|
"permissions": [
|
|
"write"
|
|
],
|
|
"type": "netgroup"
|
|
},
|
|
{
|
|
"attrs": [
|
|
"krbPrincipalKey",
|
|
"krbLastPwdChange"
|
|
],
|
|
"cn": [
|
|
"manage_host_keytab"
|
|
],
|
|
"description": [
|
|
"Manage host keytab"
|
|
],
|
|
"dn": "cn=manage_host_keytab,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"hostadmin",
|
|
"enrollhost"
|
|
],
|
|
"permissions": [
|
|
"write"
|
|
],
|
|
"type": "host"
|
|
},
|
|
{
|
|
"attrs": [
|
|
"krbPrincipalKey",
|
|
"krbLastPwdChange"
|
|
],
|
|
"cn": [
|
|
"manage_service_keytab"
|
|
],
|
|
"description": [
|
|
"Manage service keytab"
|
|
],
|
|
"dn": "cn=manage_service_keytab,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"serviceadmin",
|
|
"admins"
|
|
],
|
|
"permissions": [
|
|
"write"
|
|
],
|
|
"type": "service"
|
|
},
|
|
{
|
|
"attrs": [
|
|
"enrolledBy",
|
|
"objectClass"
|
|
],
|
|
"cn": [
|
|
"enroll_host"
|
|
],
|
|
"description": [
|
|
"Enroll a host"
|
|
],
|
|
"dn": "cn=enroll_host,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"hostadmin",
|
|
"enrollhost"
|
|
],
|
|
"permissions": [
|
|
"write"
|
|
],
|
|
"type": "host"
|
|
},
|
|
{
|
|
"cn": [
|
|
"managereplica"
|
|
],
|
|
"description": [
|
|
"Manage Replication Agreements"
|
|
],
|
|
"dn": "cn=managereplica,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"replicaadmin"
|
|
],
|
|
"memberindirect": [
|
|
"uid=admin,cn=users,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"cn=admins,cn=groups,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
|
|
]
|
|
},
|
|
{
|
|
"cn": [
|
|
"deletereplica"
|
|
],
|
|
"description": [
|
|
"Delete Replication Agreements"
|
|
],
|
|
"dn": "cn=deletereplica,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"replicaadmin"
|
|
],
|
|
"memberindirect": [
|
|
"uid=admin,cn=users,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"cn=admins,cn=groups,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
|
|
]
|
|
},
|
|
{
|
|
"cn": [
|
|
"addentitlements"
|
|
],
|
|
"description": [
|
|
"Add Entitlements"
|
|
],
|
|
"dn": "cn=addentitlements,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"entitlementadmin"
|
|
],
|
|
"permissions": [
|
|
"add"
|
|
],
|
|
"subtree": "ldap:///ipauniqueid=*,cn=entitlements,cn=etc,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
|
|
},
|
|
{
|
|
"cn": [
|
|
"removeentitlements"
|
|
],
|
|
"description": [
|
|
"Remove Entitlements"
|
|
],
|
|
"dn": "cn=removeentitlements,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"entitlementadmin"
|
|
],
|
|
"permissions": [
|
|
"delete"
|
|
],
|
|
"subtree": "ldap:///ipauniqueid=*,cn=entitlements,cn=etc,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
|
|
},
|
|
{
|
|
"attrs": [
|
|
"userCertificate"
|
|
],
|
|
"cn": [
|
|
"modifyentitlements"
|
|
],
|
|
"description": [
|
|
"Modify Entitlements"
|
|
],
|
|
"dn": "cn=modifyentitlements,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"entitlementadmin"
|
|
],
|
|
"permissions": [
|
|
"write"
|
|
],
|
|
"subtree": "ldap:///ipauniqueid=*,cn=entitlements,cn=etc,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
|
|
},
|
|
{
|
|
"attrs": [
|
|
"objectClass"
|
|
],
|
|
"cn": [
|
|
"retrieve_certs"
|
|
],
|
|
"description": [
|
|
"Retrieve Certificates from the CA"
|
|
],
|
|
"dn": "cn=retrieve_certs,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"certadmin"
|
|
],
|
|
"permissions": [
|
|
"write"
|
|
],
|
|
"subtree": "ldap:///cn=retrieve certificate,cn=virtual operations,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
|
|
},
|
|
{
|
|
"attrs": [
|
|
"objectClass"
|
|
],
|
|
"cn": [
|
|
"request_certs"
|
|
],
|
|
"description": [
|
|
"Request Certificates from the CA"
|
|
],
|
|
"dn": "cn=request_certs,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"certadmin"
|
|
],
|
|
"permissions": [
|
|
"write"
|
|
],
|
|
"subtree": "ldap:///cn=request certificate,cn=virtual operations,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
|
|
},
|
|
{
|
|
"attrs": [
|
|
"objectClass"
|
|
],
|
|
"cn": [
|
|
"request_cert_different_host"
|
|
],
|
|
"description": [
|
|
"Request Certificates from a different host"
|
|
],
|
|
"dn": "cn=request_cert_different_host,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"certadmin"
|
|
],
|
|
"permissions": [
|
|
"write"
|
|
],
|
|
"subtree": "ldap:///cn=request certificate different host,cn=virtual operations,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
|
|
},
|
|
{
|
|
"attrs": [
|
|
"objectClass"
|
|
],
|
|
"cn": [
|
|
"certificate_status"
|
|
],
|
|
"description": [
|
|
"Get Certificates status from the CA"
|
|
],
|
|
"dn": "cn=certificate_status,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"certadmin"
|
|
],
|
|
"permissions": [
|
|
"write"
|
|
],
|
|
"subtree": "ldap:///cn=certificate status,cn=virtual operations,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
|
|
},
|
|
{
|
|
"attrs": [
|
|
"objectClass"
|
|
],
|
|
"cn": [
|
|
"revoke_certificate"
|
|
],
|
|
"description": [
|
|
"Revoke Certificate"
|
|
],
|
|
"dn": "cn=revoke_certificate,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"certadmin"
|
|
],
|
|
"permissions": [
|
|
"write"
|
|
],
|
|
"subtree": "ldap:///cn=revoke certificate,cn=virtual operations,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
|
|
},
|
|
{
|
|
"attrs": [
|
|
"objectClass"
|
|
],
|
|
"cn": [
|
|
"certificate_remove_hold"
|
|
],
|
|
"description": [
|
|
"Certificate Remove Hold"
|
|
],
|
|
"dn": "cn=certificate_remove_hold,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"certadmin"
|
|
],
|
|
"permissions": [
|
|
"write"
|
|
],
|
|
"subtree": "ldap:///cn=certificate remove hold,cn=virtual operations,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
|
|
},
|
|
{
|
|
"cn": [
|
|
"update_dns"
|
|
],
|
|
"description": [
|
|
"DNS Servers Updates"
|
|
],
|
|
"dn": "cn=update_dns,cn=permissions,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com",
|
|
"member_privilege": [
|
|
"dnsadmin",
|
|
"dnsserver"
|
|
],
|
|
"memberindirect": [
|
|
"krbprincipalname=dns/ipa.ayoung.boston.devel.redhat.com@ayoung.boston.devel.redhat.com,cn=services,cn=accounts,dc=ayoung,dc=boston,dc=devel,dc=redhat,dc=com"
|
|
]
|
|
}
|
|
],
|
|
"summary": "47 permissions matched",
|
|
"truncated": false
|
|
}
|
|
} |