# /etc/remctl/conf.d/kadmin -- kadmin remctl services.  -*- conf -*-
#
# The ACL files used are specific to Stanford and will probably need changes
# for other sites (if this whole thing is ever useful for other sites).
#
# When modifying this file, keep the list of ACL files (or ANYUSER) on the
# second line of each listing for easy analysis.

kadmin change_passwd /usr/sbin/kadmin-backend logmask=3,4 \
    ANYUSER
kadmin check_expire  /usr/sbin/kadmin-backend \
    /etc/remctl/acl/kadmin-check-expire /etc/remctl/acl/kadmin-examine
kadmin check_passwd  /usr/sbin/kadmin-backend logmask=3 \
    /etc/remctl/acl/kadmin-examine /etc/remctl/acl/operations
kadmin create        /usr/sbin/kadmin-backend logmask=3 \
    /etc/remctl/acl/kadmin-create
kadmin delete        /usr/sbin/kadmin-backend \
    /etc/remctl/acl/kadmin-delete
kadmin disable       /usr/sbin/kadmin-backend \
    /etc/remctl/acl/kadmin-enable
kadmin enable        /usr/sbin/kadmin-backend \
    /etc/remctl/acl/kadmin-enable
kadmin examine       /usr/sbin/kadmin-backend \
    /etc/remctl/acl/kadmin-examine /etc/remctl/acl/operations \
    /etc/remctl/acl/security /etc/remctl/acl/data-admin \
    /etc/remctl/acl/data-view 
kadmin expiration    /usr/sbin/kadmin-backend \
    /etc/remctl/acl/kadmin-expiration
kadmin help          /usr/sbin/kadmin-backend \
    ANYUSER
kadmin instance      /usr/sbin/kadmin-backend logmask=5 \
    /etc/remctl/acl/kadmin-instance
kadmin pwexpiration  /usr/sbin/kadmin-backend \
    /etc/remctl/acl/kadmin-expiration
kadmin reset_passwd  /usr/sbin/kadmin-backend logmask=3 \
    /etc/remctl/acl/kadmin-reset

# The authors hereby relinquish any claim to any copyright that they may have
# in this work, whether granted under contract or by operation of law or
# international treaty, and hereby commit to the public, at large, that they
# shall not, at any time in the future, seek to enforce any copyright in this
# work against any person or entity, or prevent any person or entity from
# copying, publishing, distributing or creating derivative works of this work.
