URL: https://github.com/freeipa/freeipa/pull/812
Author: felipevolpone
Title: #812: [WIP] Refactoring cert-find to use API call directly instead of
using
Action: synchronized
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/812/head:pr812
git checkout pr812
From 352e502ae62e35144810a10bca1db5f909e99759 Mon Sep 17 00:00:00 2001
From: Felipe Volpone <fbarr...@redhat.com>
Date: Fri, 26 May 2017 10:28:21 -0300
Subject: [PATCH] Changing the LDAP search to do not use krbCanonicalName
directly, instead it will use krbPrincipalName
---
ipaserver/plugins/cert.py | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/ipaserver/plugins/cert.py b/ipaserver/plugins/cert.py
index fbda6ca6ca..eba85636f4 100644
--- a/ipaserver/plugins/cert.py
+++ b/ipaserver/plugins/cert.py
@@ -1520,7 +1520,7 @@ def _ldap_search(self, all, pkey_only, no_members, **options):
filters.append(filter)
filter = ldap.make_filter_from_attr(
- owner.primary_key.name,
+ 'krbPrincipalName',
value,
rule)
filters.append(filter)
_______________________________________________
FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org
To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
