IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

Do not fail upgrade if the global anonymous read ACI is not found

Browse Source 
This helps forward compatibility: the anon ACI is scheduled for removal.

https://fedorahosted.org/freeipa/ticket/3956
This commit is contained in:
Petr Viktorin
2013-10-04 13:28:16 +02:00
committed by Martin Kosek
parent 5824a0e14e
commit c813b8fbd3
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
ipaserver/install/plugins/update_anonymous_aci.py
View File

@@ -20,7 +20,7 @@
from copy import deepcopy
from ipaserver.install.plugins import FIRST, LAST
from ipaserver.install.plugins.baseupdate import PostUpdate
from ipalib import api
from ipalib import api, errors
from ipalib.aci import ACI
from ipalib.plugins import aci
from ipapython.ipa_log_manager import *
@@ -42,7 +42,11 @@ class update_anonymous_aci(PostUpdate):
acistrs = entry_attrs.get('aci', [])
acilist = aci._convert_strings_to_acis(entry_attrs.get('aci', []))
rawaci = aci._find_aci_by_name(acilist, aciprefix, aciname)
try:
rawaci = aci._find_aci_by_name(acilist, aciprefix, aciname)
except errors.NotFound:
root_logger.error('Anonymous ACI not found, cannot update it')
return False, False, []
attrs = rawaci.target['targetattr']['expression']
rawfilter = rawaci.target.get('targetfilter', None)