mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-02-25 18:55:28 -06:00
58cfc7ab68
We do account activation by using a Class of Service based on group membership. A problem can happen if the entry itself has an nsaccountlock attribute and you try doing Class of Service work as well because the local attribute has priority. So try to detect that the entry has a local nsAccountLock attribute and report an appropriate error. Don't allow the admins or editors groups to be de-activated. Return a better error message if account [in]activation fails. Catch errors when doing group [in]activation. 439230
This is a set of libraries common to IPA clients and servers though mostly
geared currently towards command-line tools.
A brief overview:
aci.py - a basic LDAP ACI parser for doing delegations.
config.py - identify the IPA server domain and realm. It uses dnsclient to
try to detect this information first and will fall back to
/etc/ipa/ipa.conf if that fails.
ipaadminutil.py - routines to help reduce the number of entries from a search
dnsclient.py - find IPA information via DNS
ipaclient.py - the main interface for any command-line tools. When initialized
if transport is True then it means the IPA server is on the
same machine so no need to use the XML-RPC interface.
rpcclient.py - the XML-RPC client API. Callers should use ipaclient instead
of this directly.
ipautil.py - helper functions
radius_util.py - helper functions for Radius
user.py
group.py
entity.py - entity is the main data type. User and Group extend this class
(but don't add anything currently).
ipavalidate.py - basic data validation routines
ipaerror.py - our own error types
krbtransport.py - do Kerberos auth over HTTP/S