[Freeipa-devel] [PATCHES] 506-507 Fix ticket #4085

[Rob Crittenden]

Simo Sorce wrote:
> Uniform fallback for global_policy and stop explicitly adding the
> default policy to all user accounts.
>
> Tested.
>
> Simo.

ACK but you need this change in order for the unit tests to pass:

diff --git a/ipatests/test_xmlrpc/test_user_plugin.py 
b/ipatests/test_xmlrpc/
test_user_plugin.py
index 14a4b50..9b17775 100644
--- a/ipatests/test_xmlrpc/test_user_plugin.py
+++ b/ipatests/test_xmlrpc/test_user_plugin.py
@@ -99,10 +99,6 @@ def get_user_result(uid, givenname, sn, operation='sh
ow', omit=[],
              mepmanagedentry=[get_group_dn(uid)],
              objectclass=add_oc(objectclasses.user, u'ipantuserattrs'),
              krbprincipalname=[u'%s@%s' % (uid, api.env.realm)],
-            krbpwdpolicyreference=[DN(('cn', 'global_policy'),
-                                      ('cn', api.env.realm),
-                                      ('cn', 'kerberos'),
-                                      api.env.basedn)],
          )
      if operation in ('show', 'show-all', 'find', 'mod'):
          result.update(