Learn more about these different git repos.
Other Git URLs
You have somewhere documented what queries are executed on the ldap server. So we can simulate correct and full access with ldapsearch so we know the acls are not blocking some requests.
All design documents are available at https://docs.pagure.org/bind-dyndb-ldap/
Exact queries aren't available as they get constructed on the fly. This is especially true for generic DNs RR types support.
A default set of ACIs for DNS entries in FreeIPA is this: https://pagure.io/freeipa/blob/master/f/install/share/dns.ldif. Line 14 defines a general ACI that allows to update elements of a DNS record if the entry is managed by the updater, directly or via a group membership.
Login to comment on this ticket.