Alexandros Kosiaris has uploaded a new change for review.
https://gerrit.wikimedia.org/r/257690
Change subject: openldap: Update base acls
......................................................................
openldap: Update base acls
Add the cn=Directory Managers acl in the base acls
Change-Id: I84abf3f9391239a52b6d7b2b78b37468c24b3aaf
---
M modules/openldap/templates/base-acls.erb
1 file changed, 1 insertion(+), 0 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/90/257690/1
diff --git a/modules/openldap/templates/base-acls.erb
b/modules/openldap/templates/base-acls.erb
index 25366f5..dd78fdc 100644
--- a/modules/openldap/templates/base-acls.erb
+++ b/modules/openldap/templates/base-acls.erb
@@ -16,6 +16,7 @@
# These access lines apply to database #1 only
access to attrs=userPassword,shadowLastChange
by dn="cn=admin,<%= @suffix %>" write
+ by group/groupOfUniqueNames/uniqueMember="cn=Directory
Managers,ou=groups,dc=wikimedia,dc=org" write
by anonymous auth
by self write
by * none
--
To view, visit https://gerrit.wikimedia.org/r/257690
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I84abf3f9391239a52b6d7b2b78b37468c24b3aaf
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Alexandros Kosiaris <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
