custodia: do not modify memberPrincipal on key update

https://fedorahosted.org/freeipa/ticket/5401

Reviewed-By: Martin Basti <mbasti@redhat.com>
Reviewed-By: Simo Sorce <ssorce@redhat.com>
This commit is contained in:
Jan Cholasta 2015-12-01 10:46:00 +01:00
parent 42544484dc
commit 01ddf51df7

View File

@ -122,8 +122,7 @@ class KEMLdap(iSecLdap):
conn.add_s(dn, mods)
except Exception: # pylint: disable=broad-except
# This may fail if the entry already exists
mods = [(ldap.MOD_REPLACE, 'memberPrincipal', principal),
(ldap.MOD_REPLACE, 'ipaPublicKey', public_key)]
mods = [(ldap.MOD_REPLACE, 'ipaPublicKey', public_key)]
conn.modify_s(dn, mods)