<meta http-equiv="content-type" content="text/html; charset=utf-8"><span class="Apple-style-span" style="font-family: arial, sans-serif; font-size: 13px; border-collapse: collapse; ">I execute this command hoping it'll work but I get some errors :<div>
<br></div><div>on my client </div><div>======================================</div><div><div>ipa -v aci-mod --taskgroup=modifyusers --permissions=write --attrs=mail --type=user "Modify Users"</div><div class="im" style="color: rgb(80, 0, 80); ">
<div>ipa: INFO: skipping plugin module ipalib.plugins.cert: env.enable_ra is not True</div><div>ipa: INFO: Created connection context.xmlclient</div></div><div>ipa: INFO: aci_mod(u'Modify Users', taskgroup=u'modifyusers', permissions=(u'write',), attrs=(u'mail',), type=u'user')</div>
<div class="im" style="color: rgb(80, 0, 80); "><div>ipa: INFO: Forwarding 'aci_mod' to server u'<a href="https://server.gamma.domain.org/ipa/xml" target="_blank" style="color: rgb(6, 88, 181); ">https://server.gamma.domain.org/ipa/xml</a>'</div>
<div>ipa: INFO: Destroyed connection context.xmlclient</div></div><div>ipa: ERROR: an internal error has occurred</div><div><div>======================================</div><div></div></div><div><br></div>logs on the server </div>
<div><div>======================================</div><div></div><div><div>==> /var/log/httpd/error_log <==</div><div>[Thu Jun 10 18:30:31 2010] [error] ipa: INFO: Created connection context.ldap2</div><div>[Thu Jun 10 18:30:31 2010] [error] ipa: DEBUG: raw: aci_mod(u'Modify Users', taskgroup=u'modifyusers', permissions=(u'write',), attrs=(u'mail',), type=u'user')</div>
<div>[Thu Jun 10 18:30:31 2010] [error] ipa: INFO: aci_mod(u'Modify Users', taskgroup=u'modifyusers', permissions=(u'write',), attrs=(u'mail',), type=u'user')</div><div>[Thu Jun 10 18:30:31 2010] [error] ipa: ERROR: non-public: KeyError: 'targetfilter'</div>
<div>[Thu Jun 10 18:30:31 2010] [error] Traceback (most recent call last):</div><div>[Thu Jun 10 18:30:31 2010] [error] File "/usr/lib/python2.6/site-packages/ipaserver/rpcserver.py", line 206, in wsgi_execute</div>
<div>[Thu Jun 10 18:30:31 2010] [error] result = self.Command[name](*args, **options)</div><div>[Thu Jun 10 18:30:31 2010] [error] File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 401, in __call__</div>
<div>[Thu Jun 10 18:30:31 2010] [error] ret = self.run(*args, **options)</div><div>[Thu Jun 10 18:30:31 2010] [error] File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 669, in run</div><div>
[Thu Jun 10 18:30:31 2010] [error] return self.execute(*args, **options)</div><div>[Thu Jun 10 18:30:31 2010] [error] File "/usr/lib/python2.6/site-packages/ipalib/plugins/aci.py", line 374, in execute</div>
<div>[Thu Jun 10 18:30:31 2010] [error] kw['filter'] = aci.target['targetfilter']['expression']</div><div>[Thu Jun 10 18:30:31 2010] [error] KeyError: 'targetfilter'</div><div>[Thu Jun 10 18:30:31 2010] [error] ipa: INFO: response: InternalError: an internal error has occurred</div>
<div>[Thu Jun 10 18:30:31 2010] [error] ipa: INFO: Destroyed connection context.ldap2</div></div><div>======================================</div><div><br></div><div>Hoping it will help.</div></div><div><br></div><div>NB : Sorry Rob for the duplicate mail ;)</div>
</span><br><div class="gmail_quote">2010/6/10 ALAHYANE Rachid <span dir="ltr"><<a href="mailto:afkkir@gmail.com">afkkir@gmail.com</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
Thank you for your response,<br><br><div class="gmail_quote"><div class="im"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br>
As an aside though I wouldn't set the ipausers as a memberof on this ACI. What that will do is allow any user to modify any other user. I doubt this is what you want.<br>
<br></blockquote></div><div>You are right, it is not what I want to do. My second command is wrong: </div><div class="im"><div>ipa -v aci-mod "Modify Users" --attrs=mail --memberof=ipausers</div><div><br></div>
</div><div>However, what I want to do is modify "Modify Users" ACI by adding the attribute "mail" in the targetattr. I do not assimilate yet the syntaxe of aci commands.</div>
<div><br></div><div>Thanks for help</div><div class="im"><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Even if you did it would be better to add the ipausers group as a member of the "Modify Users" rolegroup.<br><font color="#888888">
<br>
rob<br>
</font></blockquote></div></div><br><br clear="all"><div><div></div><div class="h5"><br>-- <br>Meilleures salutations / Best Regards<br>Rachid ALAHYANE<br><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br>Meilleures salutations / Best Regards<br>Rachid ALAHYANE<br><br>