IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

Introduce a list of attributes for which only MOD_REPLACE operations are generated.

Browse Source
This commit is contained in:
Pavel Zuna
2009-08-27 17:09:38 +02:00
committed by Rob Crittenden
parent aafdb755a3
commit 91d01a532a
1 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
ipaserver/plugins/ldap2.py
View File

@@ -144,6 +144,10 @@ def _get_syntax(attr, value):
# ldap backend class
class ldap2(CrudBackend, Encoder):
# attributes in this list cannot be deleted by update_entry
# only MOD_REPLACE operations are generated for them
force_replace_on_update_attrs = ['uidnumber', 'gidnumber']
# rules for generating filters from entries
MATCH_ANY = '|' # (|(filter1)(filter2))
MATCH_ALL = '&' # (&(filter1)(filter2))
@@ -512,10 +516,14 @@ class ldap2(CrudBackend, Encoder):
adds = list(v.difference(old_v))
if adds:
modlist.append((_ldap.MOD_ADD, k, adds))
if k in self.force_replace_on_update_attrs:
modlist.append((_ldap.MOD_REPLACE, k, adds))
else:
modlist.append((_ldap.MOD_ADD, k, adds))
rems = list(old_v.difference(v))
if rems:
modlist.append((_ldap.MOD_DELETE, k, rems))
if k not in self.force_replace_on_update_attrs:
modlist.append((_ldap.MOD_DELETE, k, rems))
return modlist