Kathy Zhu via FreeIPA-users wrote:
> Hi List,
>
> I'd like to set up a read only service user to backup my DNS zone data
> into text file daily. However, I checked outputs from "ipa
> permission-find" and all of the attributes for user setting, none
> including permission to DNS records. Did I miss something here?
>
> Thanks!
>
> Kathy. pa permission-find --bindtype=all | grep "Permission name"`,
Version sometimes makes a difference but I'll assume you're on 4.6+
The permission you want is "System: Read DNS Entries".
bindtype=all has a specific meaning, all authenticated users. It doesn't
match this permission because it grants access to a specific group (itself).
rob