freeipa/ipalib
Martin Kosek a41e10f0eb Avoid internal error when user is not Trust admin
When user tries to perform any action requiring communication with
trusted domain, IPA server tries to retrieve a trust secret on his
behalf to be able to establish the connection. This happens for
example during group-add-member command when external user is
being resolved in the AD.

When user is not member of Trust admins group, the retrieval crashes
and reports internal error. Catch this exception and rather report
properly formatted ACIError. Also make sure that this exception is
properly processed in group-add-member post callback.

https://fedorahosted.org/freeipa/ticket/3390
2013-02-20 13:23:58 -05:00
..
plugins Avoid internal error when user is not Trust admin 2013-02-20 13:23:58 -05:00
__init__.py Use DN objects instead of strings 2012-08-12 16:23:24 -04:00
aci.py Use DN objects instead of strings 2012-08-12 16:23:24 -04:00
backend.py Add CLI parsing tests 2012-03-28 15:25:33 +02:00
base.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
cli.py Run interactive_prompt callbacks after CSV values are split. 2013-02-19 11:08:11 -05:00
config.py Use DN objects instead of strings 2012-08-12 16:23:24 -04:00
constants.py Add list of domains associated to our realm to cn=etc 2013-02-19 14:15:46 +02:00
crud.py Relax restriction for leading/trailing whitespaces in *-find commands 2012-12-11 12:34:28 +01:00
errors.py Use secure method to acquire IPA CA certificate 2013-01-23 14:26:42 -05:00
frontend.py Pylint cleanup. 2013-01-29 15:39:49 +01:00
krb_utils.py Pylint cleanup. 2013-01-29 15:39:49 +01:00
output.py Typo fixes 2012-06-25 21:35:11 -04:00
parameters.py Raise ValidationError on invalid CSV values. 2013-02-08 15:16:37 +01:00
pkcs10.py Fix assorted bugs found by pylint 2011-01-25 14:01:36 -05:00
plugable.py Add tests for the help command & --help options 2013-02-18 13:07:17 -05:00
request.py Remove deprecated i18n code from ipalib/request and all references to it. 2011-03-01 10:31:36 -05:00
rpc.py Log info on failure to connect 2012-12-19 09:50:43 +01:00
session.py Compliant client side session cookie behavior 2012-12-10 12:45:09 -05:00
text.py Fix regressions introduced by pylint false positive fixes. 2011-05-11 16:50:01 +02:00
util.py Add list of domains associated to our realm to cn=etc 2013-02-19 14:15:46 +02:00
x509.py Don't initialize NSS if we don't have to, clean up unused cert refs 2013-01-23 14:26:42 -05:00