mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-02-25 18:55:28 -06:00
ipa-client-samba: map domain sid of trust domain properly for display
Trusted domain object in LDAP uses ipaNTTrustedDomainSID attribute to store SID of the trusted domain while IPA domain itself uses ipaNTSecurityIdentifier. When mapping the values for printing out a summary table, use the right mapping according to the object. Fixes: https://pagure.io/freeipa/issue/8149 Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com> Reviewed-By: Rob Crittenden <rcritten@redhat.com>
This commit is contained in:
@@ -150,6 +150,13 @@ trust_keymap = {
|
||||
}
|
||||
|
||||
|
||||
trust_keymap_trustdomain = {
|
||||
"netbios_name": "ipantflatname",
|
||||
"domain_sid": "ipanttrusteddomainsid",
|
||||
"domain_name": "cn",
|
||||
}
|
||||
|
||||
|
||||
def retrieve_domain_information(api):
|
||||
# Pull down default domain configuration
|
||||
# IPA master might be missing freeipa-server-trust-ad package
|
||||
@@ -196,7 +203,7 @@ def retrieve_domain_information(api):
|
||||
for dom in r:
|
||||
r_dom = dict()
|
||||
for key in trust_keymap:
|
||||
r_dom[key] = dom.get(trust_keymap[key], [None])[0]
|
||||
r_dom[key] = dom.get(trust_keymap_trustdomain[key], [None])[0]
|
||||
|
||||
r_idrange_name = "{realm}_id_range".format(
|
||||
realm=r_dom["domain_name"].upper()
|
||||
|
||||
Reference in New Issue
Block a user