[Freeipa-devel] updates and deletes

[Rob Crittenden]

Pete Rowley wrote:
> Rob Crittenden wrote:
>> We don't have to strictly follow this model, just laying out one 
>> possibility. We can also have 3 functions: add_attr, update_attr and 
>> del_attr. That might be simpler at the expense of verbosity 
>> (particularly over XML-RPC).
> What is update_attr intended to do? Single value add/delete?

I dunno, just thinking out loud, before I found the provided 
modifyModList function that does all this for us.

>> For deletes/inactivations I need to know what attribute(s) to set/unset.
> The inactivation scheme used by the console and the DS scripts uses a 
> role based attribute scheme. It would be good to use that for 
> compatibility, but ultimately it sets the nsAccountlock attribute in the 
> entry to "true."

Ok, it's a start anyway. I'll start with this and then add in anything 
additional that Simo finds for kerberos.

rob
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20070816/696d5c90/attachment.bin>