IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2026-08-14 06:54:55 -05:00
Code Issues Packages Projects Releases Wiki Activity

Enforce exact SID match when adding or modifying a ID range

Browse Source 
SID validation in idrange.py now enforces exact match on SIDs, thus
one can no longer use SID of an object in a trusted domain as a
trusted domain SID.

https://fedorahosted.org/freeipa/ticket/3432
This commit is contained in:
Tomas Babej
2013-03-14 15:20:30 +01:00
committed by Martin Kosek
parent 354a5db38e
commit 04a17f00b7
2 changed files with 38 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ipalib/plugins/idrange.py
+1 -1
View File
@@ -289,7 +289,7 @@ class idrange(LDAPObject):
domain_validator = self.get_domain_validator()
if not domain_validator.is_trusted_sid_valid(sid):
if not domain_validator.is_trusted_domain_sid_valid(sid):
raise errors.ValidationError(name='domain SID',
error=_('SID is not recognized as a valid SID for a '
'trusted domain'))