IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-01-26 16:16:31 -06:00
Code Issues Packages Projects Releases Wiki Activity

Changing idoverrideuser-* to treat objectClass case insensitively

Browse Source 
This is import to avoid problems when migrating from olders
versions of IPA and using idoverrideuser-* commands.

https://pagure.io/freeipa/issue/7074

Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
This commit is contained in:
Felipe Volpone 2017-09-04 09:12:06 -03:00 committed by Stanislav Laznicka
parent be9da19de3
commit 286bbb2ab7
1 changed files with 5 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
ipaserver/plugins/idviews.py
View File

@ -547,7 +547,8 @@ def resolve_object_to_anchor(ldap, obj_type, obj, fallback_to_ldap):
'group': 'ipausergroup',
}[obj_type]
if required_objectclass not in entry['objectclass']:
if not api.Object[obj_type].has_objectclass(entry['objectclass'],
required_objectclass):
raise errors.ValidationError(
name=_('IPA object'),
error=_('system IPA objects (e.g. system groups, user '
@ -790,12 +791,10 @@ class baseidoverride_del(LDAPDelete):
except errors.NotFound:
self.obj.handle_not_found(*keys)
required_object_classes = set(self.obj.object_class)
actual_object_classes = set(entry['objectclass'])
# If not, treat it as a failed search
if not required_object_classes.issubset(actual_object_classes):
self.obj.handle_not_found(*keys)
for required_oc in self.obj.object_class:
if not self.obj.has_objectclass(entry['objectclass'], required_oc):
self.obj.handle_not_found(*keys)
return dn