ipa-range-check: do not treat missing objects as error

Currently the range check plugin will return a 'Range Check error'
message if a ldapmodify operation tries to change a non-existing object.
Since the range check plugin does not need to care about non-existing
objects we can just return 0 indicating that the range check plugin has
done its work.

Resolves https://fedorahosted.org/freeipa/ticket/4924

Reviewed-By: Tomas Babej <tbabej@redhat.com>
This commit is contained in:
Sumit Bose 2015-02-24 18:32:43 +01:00 committed by Tomas Babej
parent 96624f2189
commit e8b3ed3596

View File

@ -545,8 +545,9 @@ static int ipa_range_check_pre_op(Slapi_PBlock *pb, int modtype)
ret = slapi_search_internal_get_entry(dn, NULL, &entry, ret = slapi_search_internal_get_entry(dn, NULL, &entry,
ctx->plugin_id); ctx->plugin_id);
if (ret != 0 || entry == NULL) { if (ret != 0 || entry == NULL) {
LOG_FATAL("Missing entry to modify.\n"); LOG("Missing entry to modify.\n");
ret = LDAP_NO_SUCH_OBJECT; /* No range object, nothing to do. */
ret = 0;
goto done; goto done;
} }
free_entry = true; free_entry = true;