On 05/27/2014 03:10 PM, Simo Sorce wrote:
On Tue, 2014-05-27 at 14:59 +0200, thierry bordaz wrote:
Now if an entry was not created by FreeIPA CLI ('ipa user-add
--stage') it could be impossible to update/unstage the entry with
For example with those two entries. 'ipa user-mod TestUser --stage' or
'ipa user-unstage TestUser' are unable to select the correct entry

Keep in mind that use case #1 for the staging are is "non-freeipa"
provisioning systems. So it is pretty much granted in the large majority
of cases entries will not be created by freeipa tools, which is why I
also do not want to "move" them, but only use them as templates for
actual user creation.


Ok. Good to know, I was thinking 'non-freeipa' provisioning to be a corner case and I was wrong it is the common case.

Now to make a user active,  'ipa user-unstage tuser' will be the unique way.
To be able to select the appropriate entry, I think we need to limit the RDN attribute to 'uid'.
Freeipa-devel mailing list

Reply via email to