Thomas Woerner 9dc57ef77e idviews: Use ipaAnchorUUID without DCERPC bindings for SID anchors ...

SID anchors are only resolvable on servers with DCERPC bindings
installed. On non agent replica these bindings are not installed and
therefore group and role management if there are AD user idoverride
members.

If there is an ipaUserOverride for the anchor, the ipaoriginaluid is
returned.

Fixes: https://pagure.io/freeipa/issue/9544

Signed-off-by: Thomas Woerner <twoerner@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>

2024-05-22 09:59:34 +02:00

..

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

aci.py

pylint: Fix unused-variable

2022-03-11 13:37:08 -05:00

automember.py

pylint: Fix consider-using-in

2022-03-11 13:37:08 -05:00

automount.py

Remove all references to deleted indirect map from parent map

2023-08-21 10:49:06 +02:00

baseldap.py

ipaserver: deepcopy objectclasses list from IPA config

2023-03-23 10:12:44 +01:00

baseuser.py

idp: add the ipaidpuser objectclass when needed

2023-08-30 09:13:23 -04:00

batch.py

pylint: Fix useless-suppression

2022-03-11 13:37:08 -05:00

ca.py

Add attribute ipacahsmconfiguration to the "Read CAs" ACI

2024-05-16 08:46:32 -04:00

caacl.py

ipaldap: fix conversion from boolean OID to Python

2022-06-10 09:25:27 +02:00

cert.py

Compatibility fix for PyCA cryptography 42.0.0

2024-01-24 14:54:24 +01:00

certmap.py

ipaldap: fix conversion from boolean OID to Python

2022-06-10 09:25:27 +02:00

certprofile.py

Change FreeIPA references to IPA and Identity Management

2021-01-21 13:51:45 +01:00

config.py

If HSM is configured add the token name to config-show output

2024-05-16 08:46:32 -04:00

delegation.py

Fix errors found by Pylint-2.4.3

2019-10-21 18:01:32 +11:00

dns.py

Set 'idnssoaserial' to deprecated

2022-09-29 14:23:44 +02:00

dnsserver.py

dnsserver.py: dnsserver-find no longer returns internal server error

2017-06-15 13:51:06 +02:00

dogtag.py

Return 2 when certificates are not found during requests

2024-04-02 23:06:43 +02:00

domainlevel.py

Use api.env.container_masters

2019-03-28 00:21:00 +01:00

group.py

pylint: fix errors

2024-01-09 08:40:47 +01:00

hbac.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

hbacrule.py

ipaldap: fix conversion from boolean OID to Python

2022-06-10 09:25:27 +02:00

hbacsvc.py

remove trailing newlines form python modules

2016-10-12 10:38:52 +02:00

hbacsvcgroup.py

remove trailing newlines form python modules

2016-10-12 10:38:52 +02:00

hbactest.py

pylint: fix errors

2024-01-09 08:40:47 +01:00

host.py

host: update System: Manage Host Keytab permission

2024-01-12 18:41:01 -05:00

hostgroup.py

Allow rename of a host group

2020-03-31 09:21:37 +03:00

idp.py

idp: when adding an IdP allow to override IdP options

2023-08-01 13:41:59 +02:00

idrange.py

idrange: only issue warning to restart services for a local range

2024-03-27 18:04:26 +01:00

idviews.py

idviews: Use ipaAnchorUUID without DCERPC bindings for SID anchors

2024-05-22 09:59:34 +02:00

internal.py

internal: fix 'tokensfor' typo and regenerate pot file

2024-04-10 09:30:53 +02:00

join.py

Delay import of psutil to avoid AVC

2020-09-23 14:49:15 +02:00

krbtpolicy.py

CLI: add support for passkey authentication type

2023-06-01 08:20:37 +02:00

ldap2.py

Add switch for LDAP cache debug output

2022-06-14 15:56:21 +03:00

location.py

Fix div-by-zero when svc weight is 0 for all masters in location

2020-02-26 13:42:10 -05:00

migration.py

ipaldap: fix conversion from boolean OID to Python

2022-06-10 09:25:27 +02:00

misc.py

Make env and plugins commands local again

2016-12-02 13:00:06 +01:00

netgroup.py

LGTM: raise handle_not_found()

2018-01-09 07:53:28 +01:00

otp.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

otpconfig.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

otptoken.py

Change FreeIPA references to IPA and Identity Management

2021-01-21 13:51:45 +01:00

passkeyconfig.py

passkeyconfig: require-user-verification is a boolean

2023-06-01 08:20:37 +02:00

passwd.py

ipa passwd: make help for --otp option clearer

2021-03-29 10:07:38 +03:00

permission.py

Warn for permissions with read/write/search/compare and no attrs

2022-07-15 16:59:15 +02:00

ping.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

pkinit.py

Don't fail if config-show does not return servers

2019-03-28 17:57:58 +01:00

privilege.py

principal_has_privilege: Check also idoverriseuser (ipaOriginalUid)

2024-04-05 10:05:56 +02:00

pwpolicy.py

Allow password policy minlength to be removed like other values

2023-10-16 13:23:20 -04:00

rabase.py

CRL generation master: new utility to enable|disable

2019-03-14 09:39:55 +01:00

radiusproxy.py

radiusproxy: add permission for reading radius proxy servers

2018-11-13 12:40:44 +01:00

realmdomains.py

Fix pylint 2.0 return-related violations

2018-07-11 10:11:38 +02:00

role.py

Support adding user ID overrides as group and role members

2020-06-08 12:39:34 -04:00

schema.py

pylint: Fix modified-iterating-list

2023-01-10 08:30:58 +01:00

selfservice.py

Fix errors found by Pylint-2.4.3

2019-10-21 18:01:32 +11:00

selinuxusermap.py

ipaldap: fix conversion from boolean OID to Python

2022-06-10 09:25:27 +02:00

server.py

Differentiate location meaning between host and server

2023-06-22 14:45:59 -04:00

serverrole.py

servrole: takes_params must be a tuple

2020-04-27 10:15:58 +02:00

serverroles.py

Improve config-show to show hidden servers

2019-03-28 17:57:58 +01:00

service.py

Compatibility fix for PyCA cryptography 42.0.0

2024-01-24 14:54:24 +01:00

servicedelegation.py

service delegation: allow to add and remove host principals

2020-05-14 21:47:17 +03:00

session.py

Fix some untranslatable commands in Web UI API Browser

2018-06-21 18:42:05 +02:00

stageuser.py

User plugin: improve error related to non existing idp

2023-07-19 16:59:25 -04:00

subid.py

subid: subid-match: display the owner's ID not DN

2021-09-02 20:51:56 +02:00

sudo.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

sudocmd.py

sudocmd: ensure command doesn't contain trailing dot before adding it

2021-02-15 09:59:41 +02:00

sudocmdgroup.py

remove trailing newlines form python modules

2016-10-12 10:38:52 +02:00

sudorule.py

pylint: fix duplicate-value

2023-01-10 08:30:58 +01:00

topology.py

domainlevel-get: fix various issues when running as non-admin

2019-03-25 09:48:31 +01:00

trust.py

pylint: fix errors

2024-01-09 08:40:47 +01:00

user.py

Allow the admin user to be disabled

2024-04-10 09:26:47 +02:00

vault.py

Vault: improve vault server archival/retrieval calls error handling

2024-01-30 10:18:02 -05:00

virtual.py

extract virtual operation access check subroutine

2020-06-30 11:47:29 +02:00

whoami.py

whoami.py: Type error when running tests

2017-07-07 14:44:42 +02:00

xmlserver.py

Add endpoint for serving i18n requests

2018-07-17 15:32:28 -04:00