This creates a new custom attribute, memberofindirect_[plugin]. Using this you can tell the difference between being an actual memberof another entry and being a memberof as the result if inheritence. This is particularly useful when trying to remove members of an entry, you can only remove direct members.

I had to add a couple of short sleep calls to make things work a little better. The memberof plugin runs as a postop and we have no way of knowing when it has done its work. If we don't pause we may show some stale data that memberof hasn't updated yet. .3 seconds is an arbitrary choice.

The ticket has an excellent test case for this. Similar tests can be done for users/groups and hosts/hostgroups.

ticket 966


Attachment: freeipa-rcrit-734-indirect.patch
Description: application/mbox

Freeipa-devel mailing list

Reply via email to