On 19.11.2012 13:38, Petr Vobornik wrote:
After upgrade, sshkeys of existing users and hosts are not editable
because attribute level rights are not send to Web UI due to lack of
ipasshuser object class.
'w_if_no_aci' attribute flag was introduced to bypass this issue. It
makes attribute writable when AttributeLevelRights are not present. It
was set for sshkeys_field.
I think that ipaexternalmember, gidnumber and macaddress attributes
might cause trouble as well. They are all in objectclasses that are
added to objects on-demand (like ipasshuser/ipasshhost is).
Freeipa-devel mailing list