As find_entry_by_attr no longer adds $SUFFIX to searched base DN,
trustconfig-mod could not find POSIX group to when validating the
new ipantfallbackprimarygroup value. This patch fixes this
regression.
---
Kudos to Petr Vobornik who found this error. There is already a test for this
use case, it just wasn't spotted earlier as it is skipped when trusts are not
configured.
Pushed to master as a one-liner.
Martin
From 80f71889121313a924c486a6c00e0353b4395e12 Mon Sep 17 00:00:00 2001
From: Martin Kosek <mko...@redhat.com>
Date: Wed, 10 Apr 2013 09:00:42 +0200
Subject: [PATCH] Fix trustconfig-mod primary group error
As find_entry_by_attr no longer adds $SUFFIX to searched base DN,
trustconfig-mod could not find POSIX group to when validating the
new ipantfallbackprimarygroup value. This patch fixes this
regression.
---
ipalib/plugins/trust.py | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/ipalib/plugins/trust.py b/ipalib/plugins/trust.py
index 7733d9b15c15aff361c63e829f4d9bfa9af98676..a252ad6325c6ff41a66914f3873f4b893f1a983a 100644
--- a/ipalib/plugins/trust.py
+++ b/ipalib/plugins/trust.py
@@ -623,7 +623,7 @@ class trustconfig(LDAPObject):
group,
['posixgroup'],
[''],
- self.api.Object['group'].container_dn)
+ DN(api.env.container_group, api.env.basedn))
except errors.NotFound:
self.api.Object['group'].handle_not_found(group)
else:
--
1.8.1.4
_______________________________________________
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel
