On Fri, 2011-07-01 at 11:41 -0400, Rob Crittenden wrote:
> enrolledBy represents the DN of the entry that enrolled a host. We don't
> want an admin to manipulate this but an aci allowed it. This was a
> ticket 302
Works fine with new IPA installation.
Still, I have some concerns:
1) What about ACI in existing installations? This patch won't affect it.
2) There are 2 typos in comment in ldif (admini, --setaddr)
Freeipa-devel mailing list