[Freeipa-devel] [PATCHES] 0591-0593 Change group permission object filter

Petr Viktorin pviktori at redhat.com
Fri Jun 20 12:14:16 UTC 2014


My patch 0580 was wrong; non-POSIX groups obviously lack the posixgroup 
objectclass. Actually the only objectclasses that all groups share are 
top and ipaobject.

This makes permission plugin & updater join multiple 
permission_filter_objectclasses filters with OR, and changes the --type 
group filter to (|(objectclass=ipausergroup)(objectclass=posixgroup)).

The first patch has some unrelated test fixes.


-- 
Petr³

-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-pviktori-0591-Test-and-docstring-fixes.patch
Type: text/x-patch
Size: 6957 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20140620/f71b8277/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-pviktori-0592-permission-plugin-Join-type-objectclass-filters-with.patch
Type: text/x-patch
Size: 5671 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20140620/f71b8277/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-pviktori-0593-Add-posixgroup-to-groups-permission-object-filter.patch
Type: text/x-patch
Size: 10816 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20140620/f71b8277/attachment-0002.bin>


More information about the Freeipa-devel mailing list