Rob Crittenden 9cc0754b71 Add option to limit the attributes allowed in an entry. ... Kerberos ticket policy can update policy in a user entry. This allowed set/addattr to be used to modify attributes outside of the ticket policy perview, also bypassing all validation/normalization. Likewise the ticket policy was updatable by the user plugin bypassing all validation. Add two new LDAPObject values to control this behavior: limit_object_classes: only attributes in these are allowed disallow_object_classes: attributes in these are disallowed By default both of these lists are empty so are skipped. ticket 744		2011-05-27 13:51:37 -04:00
..
test_cmdline	Change FreeIPA license to GPLv3+	2010-12-20 17:19:53 -05:00
test_install	Change FreeIPA license to GPLv3+	2010-12-20 17:19:53 -05:00
test_ipalib	Final i18n unit test fixes.	2011-03-01 10:31:43 -05:00
test_ipaserver	Change FreeIPA license to GPLv3+	2010-12-20 17:19:53 -05:00
test_pkcs10	Change FreeIPA license to GPLv3+	2010-12-20 17:19:53 -05:00
test_xmlrpc	Add option to limit the attributes allowed in an entry.	2011-05-27 13:51:37 -04:00
__init__.py	Change FreeIPA license to GPLv3+	2010-12-20 17:19:53 -05:00
data.py	Change FreeIPA license to GPLv3+	2010-12-20 17:19:53 -05:00
test_util.py	Change FreeIPA license to GPLv3+	2010-12-20 17:19:53 -05:00
util.py	Change FreeIPA license to GPLv3+	2010-12-20 17:19:53 -05:00