[Freeipa-devel] [PATCH] fix account activation

[Rob Crittenden]

Simo Sorce wrote:
> On Mon, 2008-03-31 at 11:36 -0400, Rob Crittenden wrote:
>> Fix account activation.
>>
>> We do account activation by using a Class of Service based on group 
>> membership. A problem can happen if the entry itself has an 
>> nsaccountlock attribute and you try doing Class of Service work as
>> well 
>> because the local attribute has priority. So try to detect that the 
>> entry has a local nsAccountLock attribute and report an appropriate
>> error.
>>
>> Don't allow the admins or editors groups to be de-activated.
>>
>> Return a better error message if account [in]activation fails.
> 
> Ack!
> Good Job Rob.
> 
> Simo.
> 

thanks

pushed
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20080331/47c39e4a/attachment.bin>