When a stage user is activate (ipa stageuse-activate), UUID plugin
   (DS) checks that the ipaUniqueID value of the  new active user is
   This is useful to prevent a provisioning systems to create Active
   user with invalid ipaUniqueID.
   Now one of the workflow step is to move a Delete user into the Stage
   container. In that case the Stage entry contains a ipaUniqueID and
   can not activate.

   A possibility is to 'reset'  the ipaUniqueID value to 'autogenerate'
   during that step but I wonder it it is valid to reset it.
   Also, is it valid to reset it and keep others values like
   uidNumber/gidNumber ?


Freeipa-devel mailing list

Reply via email to