Re: [Freeipa-devel] [PATCH] 424 don't require kerberos attrs on all password changes

2010-04-23 Thread Rob Crittenden
Simo Sorce wrote: On Fri, 23 Apr 2010 11:40:51 -0400 Rob Crittenden wrote: One could not set a password on a non-kerberos entry using ldappasswd. The password plugin was always trying to set the kerberos key as well as kerberos password policy attributes (lastpwdchange, etc). Add a test to se

Re: [Freeipa-devel] [PATCH] 424 don't require kerberos attrs on all password changes

2010-04-23 Thread Simo Sorce
On Fri, 23 Apr 2010 11:40:51 -0400 Rob Crittenden wrote: > One could not set a password on a non-kerberos entry using > ldappasswd. The password plugin was always trying to set the kerberos > key as well as kerberos password policy attributes (lastpwdchange, > etc). > > Add a test to see if the

[Freeipa-devel] [PATCH] 424 don't require kerberos attrs on all password changes

2010-04-23 Thread Rob Crittenden
One could not set a password on a non-kerberos entry using ldappasswd. The password plugin was always trying to set the kerberos key as well as kerberos password policy attributes (lastpwdchange, etc). Add a test to see if the entry has kerberos objectclasses and if not then skip the kerberos