We don't want people willy-nilly changing principal names. The proper way to do this is to rename the user entry, so remove the option.

rob
>From 87bfbee3afdb1c347e29c83a16cc575058832756 Mon Sep 17 00:00:00 2001
From: Rob Crittenden <[email protected]>
Date: Sat, 11 Dec 2010 01:07:20 -0500
Subject: [PATCH] Remove principal as an option when updating an existing user.

ticket 559
---
 ipalib/plugins/user.py |    1 +
 1 files changed, 1 insertions(+), 0 deletions(-)

diff --git a/ipalib/plugins/user.py b/ipalib/plugins/user.py
index 283c0c4..31f9080 100644
--- a/ipalib/plugins/user.py
+++ b/ipalib/plugins/user.py
@@ -131,6 +131,7 @@ class user(LDAPObject):
             label=_('Kerberos principal'),
             default_from=lambda uid: '%...@%s' % (uid, api.env.realm),
             autofill=True,
+            flags=['no_update'],
         ),
         Str('mail*',
             cli_name='email',
-- 
1.7.2.1

_______________________________________________
Freeipa-devel mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/freeipa-devel

Reply via email to