mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-02-25 18:55:28 -06:00
Previously in order to enable the LDAP profile subsystem the ca_enable_ldap_profile_subsystem() would check the current value of the profile subsystem class parameter in CS.cfg. If the parameter was still set to the default value (i.e. ProfileSubsystem), the code would change it to LDAPProfileSubsystem. There is a effort in PKI to clean up the profile subsystem classes which may require changing the default value for this parameter. However, this improvement is blocked since the ca_enable_ldap_profile_subsystem() is implicitly assuming that the default value will always be ProfileSubsystem. This patch modifies the code such that instead of checking for a specific value that needs to be changed, it will check whether it has the desired value already. This mechanism will reduce potential conflicts with future PKI improvements. Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>