On 06/20/2014 02:14 PM, Petr Viktorin wrote: > My patch 0580 was wrong; non-POSIX groups obviously lack the posixgroup > objectclass. Actually the only objectclasses that all groups share are top and > ipaobject. > > This makes permission plugin & updater join multiple > permission_filter_objectclasses filters with OR, and changes the --type group > filter to (|(objectclass=ipausergroup)(objectclass=posixgroup)). > > The first patch has some unrelated test fixes.
This looks as the right thing to do, thanks. Access to group was restored, group type also worked fine. I found just one typo in 593 - "Retreive". When you fix this, it's an ACK. Martin _______________________________________________ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
