On 04/20/2015 09:10 AM, Petr Spacek wrote:
On 17.4.2015 17:16, thierry bordaz wrote:
Hello,
User life cycle uses a new DS aci right: moddn. This right comes
with two new target keywords (target_to and target_from).
permission plugins should support those new target keywords and so
those attributes need to be defined in the schema 60basev3.ldif.
When adding new attributes in that schema, I should pick new OIDs.
Is it ok to pick the next ones available in ds-oids/08-FreeIPA.txt
I would say that these ACI-related attributes should be assigned from DS-core
OID arc (assuming that this ACI is not FreeIPA-specific and will be available
in core 389 DS).
Thanks Petr.
I wanted to allow new FreeIPA specific attributes to the definition of
'ipaPermissionV2' objectclass.
So it is Freeipa-core OIDs.
My understanding is that when the patch on 60baseV3.ldif will be
reviewed, I will consequently update/push 08-FreeIPA.txt changes.
thanks
thierry
(rhanana) and what is review process for changes in 08-FreeIPA.txt ?
Use your best judgment :-) Definitions will be reviewed later when LDIF with
it is sent as a patch to freeipa-devel list.
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
