freeipa/ipalib/plugins
Martin Kosek a41e10f0eb Avoid internal error when user is not Trust admin
When user tries to perform any action requiring communication with
trusted domain, IPA server tries to retrieve a trust secret on his
behalf to be able to establish the connection. This happens for
example during group-add-member command when external user is
being resolved in the AD.

When user is not member of Trust admins group, the retrieval crashes
and reports internal error. Catch this exception and rather report
properly formatted ACIError. Also make sure that this exception is
properly processed in group-add-member post callback.

https://fedorahosted.org/freeipa/ticket/3390
2013-02-20 13:23:58 -05:00
..
__init__.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
aci.py Raise ValidationError for incorrect subtree option. 2013-01-14 14:09:54 +01:00
automember.py Fix various typos. 2012-09-18 08:45:28 +02:00
automount.py Internationalization for public errors 2012-09-03 18:16:12 +02:00
baseldap.py Enable transactions by default, make password and modrdn TXN-aware 2012-11-21 14:55:12 +01:00
batch.py Fix batch command error reporting 2012-07-11 10:49:02 +02:00
cert.py Implement the cert-find command for the dogtag CA backend. 2013-02-19 11:52:33 -05:00
config.py Only use service PAC type as an override 2012-10-03 08:53:41 +02:00
delegation.py Explicitly filter options that permission-{add,mod} passes to aci-{add,mod} 2012-07-02 08:31:03 +02:00
dns.py Pylint cleanup. 2013-01-29 15:39:49 +01:00
entitle.py Internationalization for public errors 2012-09-03 18:16:12 +02:00
group.py Avoid internal error when user is not Trust admin 2013-02-20 13:23:58 -05:00
hbacrule.py Internationalization for public errors 2012-09-03 18:16:12 +02:00
hbacsvc.py ticket 1669 - improve i18n docstring extraction 2011-08-24 23:13:16 -04:00
hbacsvcgroup.py ticket 1669 - improve i18n docstring extraction 2011-08-24 23:13:16 -04:00
hbactest.py Fix hbachelp examples formatting 2013-02-14 08:38:11 +01:00
host.py Add support for RFC 6594 SSHFP DNS records. 2013-02-01 09:16:09 -05:00
hostgroup.py Use DN objects instead of strings 2012-08-12 16:23:24 -04:00
idrange.py Add option to specify SID using domain name to idrange-add/mod 2013-02-18 16:37:07 +01:00
internal.py Web UI: disable global forwarding per zone 2012-11-09 17:46:04 +01:00
kerberos.py Use fully qualified CCACHE names 2013-02-01 08:13:50 +01:00
krbtpolicy.py Use DN objects instead of strings 2012-08-12 16:23:24 -04:00
migration.py Prevent a crash when no entries are successfully migrated. 2013-02-08 16:23:25 +01:00
misc.py ticket 1669 - improve i18n docstring extraction 2011-08-24 23:13:16 -04:00
netgroup.py Internationalization for public errors 2012-09-03 18:16:12 +02:00
passwd.py Internationalization for public errors 2012-09-03 18:16:12 +02:00
permission.py Enable transactions by default, make password and modrdn TXN-aware 2012-11-21 14:55:12 +01:00
ping.py Document the ping plugin. 2012-01-12 05:46:09 -05:00
pkinit.py Internationalization for public errors 2012-09-03 18:16:12 +02:00
privilege.py Removal of memberofindirect_permissons from privileges 2012-04-09 22:12:39 -04:00
pwpolicy.py Sort policies numerically in pwpolicy-find 2012-09-03 21:47:21 -04:00
realmdomains.py Add list of domains associated to our realm to cn=etc 2013-02-19 14:15:46 +02:00
role.py Only apply validation rules when adding and updating. 2012-02-29 18:00:45 -05:00
selfservice.py Explicitly filter options that permission-{add,mod} passes to aci-{add,mod} 2012-07-02 08:31:03 +02:00
selinuxusermap.py Make sure selinuxusemap behaves consistently to HBAC rule 2012-09-12 16:13:17 +02:00
service.py Only use service PAC type as an override 2012-10-03 08:53:41 +02:00
sudocmd.py Prevent a sudo command from being deleted if it is a member of a sudo rule 2013-02-20 17:35:16 +01:00
sudocmdgroup.py Fix sudo help and summaries 2011-08-29 21:26:23 -04:00
sudorule.py Fix various typos. 2012-09-18 08:45:28 +02:00
trust.py Add SID blacklist attributes 2013-02-12 10:37:34 +01:00
user.py Enable transactions by default, make password and modrdn TXN-aware 2012-11-21 14:55:12 +01:00
virtual.py Internationalization for public errors 2012-09-03 18:16:12 +02:00
xmlclient.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00