On 02/11/2013 11:17 AM, Tomas Babej wrote:
The name of any protected group now cannot be changed by modifing
the cn attribute using --setattr. Unit tests have been added to
make sure there is no regression.
We need a better general way to validate getattr/setattr on known
atributes, but works well for now. ACK
Freeipa-devel mailing list