On 27.9.2011 10:15, Sumit Bose wrote:
Hi,
currently the change password plugin does not check if the connection is
coming from a local LDAPI socket and denies password change requests via
LDAPI. This patch changes the check to just look at the overall SSF of
the connection which covers all types of connection.
There is a similar check in ipa_enrollment.c. But I think enrollments via
LDAPI does not make much sense so it does not need to be changed.
IMHO it should be changed anyway, for the sake of consistency.
This patch should fix https://fedorahosted.org/freeipa/ticket/1877.
bye,
Sumit
The patch has trailing whitespace on lines 20 and 32-35 and needs to be
rebased.
Tested the patch with ldappasswd over ldap/ldaps/ldapi - works as expected.
Honza
--
Jan Cholasta
_______________________________________________
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel
