mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-30 10:47:08 -06:00
In add_service_principal() don't let the user pass in the realm.
This could result in a principal of the form: service/host@something@REALM
This commit is contained in:
parent
db2e5b26b7
commit
0576193015
@ -1694,6 +1694,10 @@ class IPAServer:
|
||||
|
||||
service_container = DefaultServiceContainer
|
||||
|
||||
# Don't let the user set the realm
|
||||
if name.find('@') > 0:
|
||||
raise ipaerror.gen_exception(ipaerror.INPUT_INVALID_PARAMETER)
|
||||
|
||||
princ_name = name + "@" + self.realm
|
||||
|
||||
conn = self.getConnection(opts)
|
||||
|
Loading…
Reference in New Issue
Block a user