freeipa/ipaserver
Alexander Bokovoy 1adc941d1f group-del: add a warning to logs when password policy could not be removed
When a user with sufficient permissions creates a group using ipa
group-add and then deletes it again with group-del ipa gives an
Insufficient access error, but still deletes the group.

This is due to a need to remove an associaed password policy for the
group. However, a password policy might be inaccessible to the user
(created by a more powerful admin) and there is no way to check that it
exists with current privileges other than trying to remove it.

Seeing a Python exceptions in the Apache log without explanation is
confusing to many users, so add a warning message that explains what
happens here.

Fixes: https://pagure.io/freeipa/issue/6884
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Christian Heimes <cheimes@redhat.com>
2018-05-03 16:44:57 +02:00
..
advise ipa-advise: adapt config-client-for-smart-card-auth to authselect 2018-04-27 14:01:33 +02:00
dnssec Add absolute_import future imports 2018-04-20 09:43:37 +02:00
install Use a regex in installutils.get_directive instead of line splitting 2018-05-02 14:12:11 +02:00
plugins group-del: add a warning to logs when password policy could not be removed 2018-05-03 16:44:57 +02:00
secrets Add absolute_import future imports 2018-04-20 09:43:37 +02:00
__init__.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
dcerpc_common.py trust: detect and error out when non-AD trust with IPA domain name exists 2017-12-07 21:18:51 +02:00
dcerpc.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
dns_data_management.py DNS update: reduce timeout for CA records 2017-08-30 13:02:59 +02:00
Makefile.am Build: Makefiles for Python packages 2016-11-09 13:08:32 +01:00
p11helper.py py3: softhsm key_id must be bytes 2017-06-01 09:24:24 +02:00
rpcserver.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
servroles.py Removes NTP server role from servroles and description 2018-04-09 11:00:02 -04:00
setup.cfg Port all setup.py to setuptools 2016-10-20 18:43:37 +02:00
setup.py Have all the scripts run in python 3 by default 2018-02-15 18:43:12 +01:00
topology.py fix incorrect suffix handling in topology checks 2017-06-05 18:37:37 +02:00