|
 |
d69b2b |
From ec1714c81290a03ae9aa5fd10acf3e9be71596d7 Mon Sep 17 00:00:00 2001
|
|
|
d69b2b |
From: Mark Reynolds <mreynolds@redhat.com>
|
|
|
d69b2b |
Date: Thu, 11 Jun 2020 15:47:43 -0400
|
|
|
d69b2b |
Subject: [PATCH] Issue 50912 - pwdReset can be modified by a user
|
|
|
d69b2b |
|
|
|
d69b2b |
Description: The attribute "pwdReset" should only be allowed to be set by the
|
|
|
d69b2b |
server. Update schema definition to include NO-USER-MODIFICATION
|
|
|
d69b2b |
|
|
|
d69b2b |
relates: https://pagure.io/389-ds-base/issue/50912
|
|
|
d69b2b |
|
|
|
d69b2b |
Reviewed by: mreynolds(one line commit rule)
|
|
|
d69b2b |
---
|
|
|
d69b2b |
ldap/schema/02common.ldif | 2 +-
|
|
|
d69b2b |
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
d69b2b |
|
|
|
d69b2b |
diff --git a/ldap/schema/02common.ldif b/ldap/schema/02common.ldif
|
|
|
d69b2b |
index 966636bef..c6dc074db 100644
|
|
|
d69b2b |
--- a/ldap/schema/02common.ldif
|
|
|
d69b2b |
+++ b/ldap/schema/02common.ldif
|
|
|
d69b2b |
@@ -76,7 +76,7 @@ attributeTypes: ( 2.16.840.1.113730.3.1.2349 NAME ( 'passwordDictCheck' 'pwdDict
|
|
|
d69b2b |
attributeTypes: ( 2.16.840.1.113730.3.1.2350 NAME ( 'passwordDictPath' 'pwdDictPath' ) DESC '389 Directory Server password policy attribute type' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE X-ORIGIN '389 Directory Server' )
|
|
|
d69b2b |
attributeTypes: ( 2.16.840.1.113730.3.1.2351 NAME ( 'passwordUserAttributes' 'pwdUserAttributes' ) DESC '389 Directory Server password policy attribute type' SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE X-ORIGIN '389 Directory Server' )
|
|
|
d69b2b |
attributeTypes: ( 2.16.840.1.113730.3.1.2352 NAME ( 'passwordBadWords' 'pwdBadWords' ) DESC '389 Directory Server password policy attribute type' SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE X-ORIGIN '389 Directory Server' )
|
|
|
d69b2b |
-attributeTypes: ( 2.16.840.1.113730.3.1.2366 NAME 'pwdReset' DESC '389 Directory Server password policy attribute type' EQUALITY booleanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE USAGE directoryOperation X-ORIGIN '389 Directory Server' )
|
|
|
d69b2b |
+attributeTypes: ( 2.16.840.1.113730.3.1.2366 NAME 'pwdReset' DESC '389 Directory Server password policy attribute type' EQUALITY booleanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE NO-USER-MODIFICATION USAGE directoryOperation X-ORIGIN '389 Directory Server' )
|
|
|
d69b2b |
attributeTypes: ( 2.16.840.1.113730.3.1.198 NAME 'memberURL' DESC 'Netscape defined attribute type' SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 X-ORIGIN 'Netscape Directory Server' )
|
|
|
d69b2b |
attributeTypes: ( 2.16.840.1.113730.3.1.199 NAME 'memberCertificateDescription' DESC 'Netscape defined attribute type' SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 X-ORIGIN 'Netscape Directory Server' )
|
|
|
d69b2b |
attributeTypes: ( 2.16.840.1.113730.3.1.207 NAME 'vlvBase' DESC 'Netscape defined attribute type' SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 X-ORIGIN 'Netscape Directory Server' )
|
|
|
d69b2b |
--
|
|
|
d69b2b |
2.26.2
|
|
|
d69b2b |
|