adtrust: remove nttrustpartner parameter

MS-ADTS spec requires that TrustPartner field should be equal to the
commonName (cn) of the trust. We used it a bit wrongly to express
trust relationship between parent and child domains. In fact, we
have parent-child relationship recorded in the DN (child domains
are part of the parent domain's container).

Remove the argument that was never used externally but only supplied by
trust-specific code inside the IPA framework.

Part of https://fedorahosted.org/freeipa/ticket/5354

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
This commit is contained in:
Alexander Bokovoy 2016-06-06 11:42:34 +03:00 committed by Martin Basti
parent 478017357b
commit a0f953e0ff
5 changed files with 5 additions and 68 deletions

View File

@ -5323,14 +5323,13 @@ output: Entry('result')
output: Output('summary', type=[<type 'unicode'>, <type 'NoneType'>])
output: PrimaryKey('value')
command: trustdomain_add
args: 2,9,3
args: 2,8,3
arg: Str('trustcn', cli_name='trust')
arg: Str('cn', cli_name='domain')
option: Str('addattr*', cli_name='addattr')
option: Flag('all', autofill=True, cli_name='all', default=False)
option: Str('ipantflatname?', cli_name='flat_name')
option: Str('ipanttrusteddomainsid?', cli_name='sid')
option: Str('ipanttrustpartner?')
option: Flag('raw', autofill=True, cli_name='raw', default=False)
option: Str('setattr*', cli_name='setattr')
option: StrEnum('trust_type', autofill=True, cli_name='type', default=u'ad', values=[u'ad'])
@ -5364,14 +5363,13 @@ output: Output('result', type=[<type 'bool'>])
output: Output('summary', type=[<type 'unicode'>, <type 'NoneType'>])
output: PrimaryKey('value')
command: trustdomain_find
args: 2,10,4
args: 2,9,4
arg: Str('trustcn', cli_name='trust')
arg: Str('criteria?')
option: Flag('all', autofill=True, cli_name='all', default=False)
option: Str('cn?', autofill=False, cli_name='domain')
option: Str('ipantflatname?', autofill=False, cli_name='flat_name')
option: Str('ipanttrusteddomainsid?', autofill=False, cli_name='sid')
option: Str('ipanttrustpartner?', autofill=False)
option: Flag('pkey_only?', autofill=True, default=False)
option: Flag('raw', autofill=True, cli_name='raw', default=False)
option: Int('sizelimit?', autofill=False)
@ -5382,7 +5380,7 @@ output: ListOfEntries('result')
output: Output('summary', type=[<type 'unicode'>, <type 'NoneType'>])
output: Output('truncated', type=[<type 'bool'>])
command: trustdomain_mod
args: 2,11,3
args: 2,10,3
arg: Str('trustcn', cli_name='trust')
arg: Str('cn', cli_name='domain')
option: Str('addattr*', cli_name='addattr')
@ -5390,7 +5388,6 @@ option: Flag('all', autofill=True, cli_name='all', default=False)
option: Str('delattr*', cli_name='delattr')
option: Str('ipantflatname?', autofill=False, cli_name='flat_name')
option: Str('ipanttrusteddomainsid?', autofill=False, cli_name='sid')
option: Str('ipanttrustpartner?', autofill=False)
option: Flag('raw', autofill=True, cli_name='raw', default=False)
option: Flag('rights', autofill=True, default=False)
option: Str('setattr*', cli_name='setattr')

View File

@ -90,5 +90,5 @@ IPA_DATA_VERSION=20100614120000
# #
########################################################
IPA_API_VERSION_MAJOR=2
IPA_API_VERSION_MINOR=176
# Last change: mbasti - location-show: list servers in the location
IPA_API_VERSION_MINOR=177
# Last change: abbra - adtrust: remove nttrustpartner parameter

View File

@ -22022,20 +22022,6 @@
"noextrawhitespace": true,
"type": "unicode"
},
{
"attribute": true,
"class": "Str",
"deprecated_cli_aliases": [],
"doc": "Trusted domain partner",
"flags": [
"no_display",
"no_option"
],
"label": "Trusted domain partner",
"name": "ipanttrustpartner",
"noextrawhitespace": true,
"type": "unicode"
},
{
"name": "setattr"
},
@ -22141,21 +22127,6 @@
"query": true,
"type": "unicode"
},
{
"attribute": true,
"class": "Str",
"deprecated_cli_aliases": [],
"doc": "Trusted domain partner",
"flags": [
"no_display",
"no_option"
],
"label": "Trusted domain partner",
"name": "ipanttrustpartner",
"noextrawhitespace": true,
"query": true,
"type": "unicode"
},
{
"class": "Int",
"deprecated_cli_aliases": [],
@ -22227,20 +22198,6 @@
"noextrawhitespace": true,
"type": "unicode"
},
{
"attribute": true,
"class": "Str",
"deprecated_cli_aliases": [],
"doc": "Trusted domain partner",
"flags": [
"no_display",
"no_option"
],
"label": "Trusted domain partner",
"name": "ipanttrustpartner",
"noextrawhitespace": true,
"type": "unicode"
},
{
"name": "setattr"
},

View File

@ -8527,19 +8527,6 @@
"noextrawhitespace": true,
"type": "unicode"
},
{
"class": "Str",
"deprecated_cli_aliases": [],
"doc": "Trusted domain partner",
"flags": [
"no_display",
"no_option"
],
"label": "Trusted domain partner",
"name": "ipanttrustpartner",
"noextrawhitespace": true,
"type": "unicode"
}
],
"uuid_attribute": ""
},

View File

@ -1477,10 +1477,6 @@ class trustdomain(LDAPObject):
cli_name='sid',
label=_('Domain Security Identifier'),
),
Str('ipanttrustpartner?',
label=_('Trusted domain partner'),
flags=['no_display', 'no_option'],
),
)
# LDAPObject.get_dn() only passes all but last element of keys and no kwargs