On Mon, Mar 12, 2012 at 1:09 PM, Rob Crittenden <rcrit...@redhat.com> wrote:
> Could also be python-ldap, we ran into a schema handling problem already.
> It may be possible to duplicate this from the command line using the
> --rights option. This executes the same GER control. I'll have to refresh my
> F-17 install, it is ancient by current standards.
> You could test with something like:
> # ipa user-show --all --rights admin
> If it worked it would include attributelevelrights with a huge list of
> values. This represents the rights you have on the various attributes (read,
> write, etc). The UI uses this to determine what it will allow you to edit.
Here is the result:
[root@f17a yum.repos.d]# ipa user-show --all --rights admin
ipa: ERROR: get-effective-rights: missing subject: Invalid syntax.
I would be happy to try the debug flag in python-ldap, but not sure how to do.
Freeipa-users mailing list