[Freeipa-devel] [PATCH] 876 normalize user principal

Rob Crittenden rcritten at redhat.com
Wed Sep 21 14:47:40 UTC 2011


Martin Kosek wrote:
> On Fri, 2011-09-16 at 10:16 -0400, Rob Crittenden wrote:
>> Rob Crittenden wrote:
>>> Normalize and validate user principals in user and passwd plugins. The
>>> uid in the principal should be lower-case.
>>>
>>> rob
>>
>> With updated API.txt
>>
>> rob
>
> This works fine. I would just suggest improving the way how we handle
> realm case mismatch:
>
> # ipa user-add --first=Foo --last=Bar --principal=fbar3 at idm.lab.bos.redhat.com FBar3
> ipa: ERROR: The realm for the principal does not match the realm for this IPA server
> [root at vm-120 ~]# ipa user-add --first=Foo --last=Bar --principal=fbar3 at IDM.LAB.BOS.REDHAT.COM FBar3
> ------------------
> Added user "fbar3"
> ------------------
>    User login: fbar3
>    First name: Foo
>    Last name: Bar
>    Full name: Foo Bar
>    Display name: Foo Bar
>    Initials: FB
>    Home directory: /home/fbar3
>    GECOS field: Foo Bar
>    Login shell: /bin/sh
>    Kerberos principal: fbar3 at IDM.LAB.BOS.REDHAT.COM
>    UID: 63600005
>    GID: 63600001
>    Keytab: False
>    Password: False
>
> I think we should force it to uppercase in split_principal() as we do in
> service.py.
>
> Martin
>

Done since we require upper-case realms in the installer.

rob
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-rcrit-876-3-principal.patch
Type: text/x-patch
Size: 12700 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20110921/35ce245c/attachment.bin>


More information about the Freeipa-devel mailing list