[Freeipa-devel] [PATCH] 319 Make ipakrbprincipal objectclass optional
Martin Kosek
mkosek at redhat.com
Mon Oct 1 15:28:39 UTC 2012
>From IPA 3.0, services have by default ipakrbprincipal objectclass which
allows ipakrbprincipalalias attribute used for case-insensitive principal
searches. However, as services created in previous version do not have
this objectclass (and attribute), they are not listed in service list
produced by service-find.
Treat the ipakrbprincipal as optional to avoid missing services in
service-find command. Add flag to service-mod command which can fill
ipakrbprincipalalias attribute when case-insensitive principal searches
for a 2.x service are required.
https://fedorahosted.org/freeipa/ticket/3106
-----
I am still pondering about a right way to fill ipakrbprincipalalias used in for
IPA 3.0 case-insensitive searches, so far I implemented this command:
ipa service-mod PRINCIPAL --update-principal-alias
But I am thinking it may be a better approach to generalize it and do something
like that:
ipa service-mod PRINCIPAL --upgrade/--update
This command would do a general update of service entry to an up-to-date 3.0
style, in this case it could do 2 things:
* fill ipakrbprincipalalias
* fill ipakrbauthzdata (based on default value in IPA config).
Suggestions or comments welcome.
Martin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mkosek-319-make-ipakrbprincipal-objectclass-optional.patch
Type: text/x-patch
Size: 5222 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20121001/19c5c0d0/attachment.bin>
More information about the Freeipa-devel
mailing list