IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-01-28 09:06:44 -06:00
Code Issues Packages Projects Releases Wiki Activity

Remove GetEffectiveRights control when ldap2.get_effective_rights fails.

Browse Source 
Reviewed-By: Martin Kosek <mkosek@redhat.com>
This commit is contained in:
Jan Cholasta 2014-06-18 11:45:45 +02:00 committed by Martin Kosek
parent d6fb110b77
commit 8b8774d138
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
ipaserver/plugins/ldap2.py
View File

@ -333,9 +333,11 @@ class ldap2(LDAPClient, CrudBackend):
"krbPrincipalAux", base_dn=api.env.basedn) "krbPrincipalAux", base_dn=api.env.basedn)
sctrl = [GetEffectiveRightsControl(True, "dn: " + str(entry.dn))] sctrl = [GetEffectiveRightsControl(True, "dn: " + str(entry.dn))]
self.conn.set_option(_ldap.OPT_SERVER_CONTROLS, sctrl) self.conn.set_option(_ldap.OPT_SERVER_CONTROLS, sctrl)
entry = self.get_entry(dn, attrs_list) try:
# remove the control so subsequent operations don't include GER entry = self.get_entry(dn, attrs_list)
self.conn.set_option(_ldap.OPT_SERVER_CONTROLS, []) finally:
# remove the control so subsequent operations don't include GER
self.conn.set_option(_ldap.OPT_SERVER_CONTROLS, [])
return entry return entry
def can_write(self, dn, attr): def can_write(self, dn, attr):