[Freeipa-devel] [PATCH] 813 fix enrolledBy regression

Rob Crittenden rcritten at redhat.com
Fri Jul 15 14:11:49 UTC 2011


Martin Kosek wrote:
> On Tue, 2011-07-12 at 15:11 -0400, Rob Crittenden wrote:
>> Martin Kosek wrote:
>>> On Fri, 2011-07-01 at 11:41 -0400, Rob Crittenden wrote:
>>>> enrolledBy represents the DN of the entry that enrolled a host. We don't
>>>> want an admin to manipulate this but an aci allowed it. This was a
>>>> regression.
>>>>
>>>> ticket 302
>>>>
>>>> rob
>>>
>>> Works fine with new IPA installation.
>>>
>>> Still, I have some concerns:
>>>
>>> 1) What about ACI in existing installations? This patch won't affect it.
>>>
>>> 2) There are 2 typos in comment in ldif (admini, --setaddr)
>>>
>>> Martin
>>>
>>
>> Well, I didn't consider the lack of an update to be a huge problem
>> originally. I went ahead and added one. This required changing the
>> syntax of replace slightly, using two colons to distinguish between old
>> and new.
>>
>> Typos fixed too.
>>
>> rob
>
> ACK. Works fine.
>
> Martin
>

pushed to master




More information about the Freeipa-devel mailing list