[Freeipa-devel] Re: [PATCH] Fix bug in ldap2.normalize_dn.

[Rob Crittenden]

Pavel Zuna wrote:
> Rob Crittenden wrote:
>> Pavel Zuna wrote:
>>> [Re-post of forgotten patch.]
>>>
>>> Patch 0001: Fix bug in ldap2.normalize_dn.
>>>
>>> Pavel
>>
>> I'm not sure I understand the commit comment about mixed case DNs. If 
>> this function is supposed to normalize DNs then they should all come 
>> out the same, right?
>>
>> rob
> Well, I run into a problem with the service plugin (and it would 
> probably cause problems in other plugins too). When creating the entry 
> with a RDN attribute containing upper-case characters, 2 values were 
> actually created. For example:
> 
> # ipa service2-create DNS/test
> ----------------
> service2-create:
> ----------------
>   dn: krbprincipalname=dns/test at pzuna,cn=services,cn=accounts,dc=pzuna
>   krbprincipalname: DNS/test at PZUNA
>   krbprincipalname: dns/test at pzuna
>   objectclass: krbprincipal
>   objectclass: krbprincipalaux
>   objectclass: krbticketpolicyaux
>   objectclass: ipaservice
>   objectclass: pkiuser
>   objectclass: top
> ---------------------------
> Created service "DNS/test.
> ---------------------------
> 
> One of the value was entered by the plugin and the other one derived 
> from the DN (which was actually build from the attribute value, but 
> converted to lower-case) by DS.
> 
> The old plugin wasn't converting DN to lower-case and let DS figure out 
> the RDN attribute value from it.
> 
> There might be a better way around this, but I couldn't find any.
> 
> Pavel

Good point.

ack, pushed to master
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20090610/c4e58182/attachment.bin>