[Freeipa-devel] [PATCH] 876 normalize user principal

Martin Kosek mkosek at redhat.com
Tue Sep 20 11:50:02 UTC 2011


On Fri, 2011-09-16 at 10:16 -0400, Rob Crittenden wrote:
> Rob Crittenden wrote:
> > Normalize and validate user principals in user and passwd plugins. The
> > uid in the principal should be lower-case.
> >
> > rob
> 
> With updated API.txt
> 
> rob

This works fine. I would just suggest improving the way how we handle
realm case mismatch:

# ipa user-add --first=Foo --last=Bar --principal=fbar3 at idm.lab.bos.redhat.com FBar3
ipa: ERROR: The realm for the principal does not match the realm for this IPA server
[root at vm-120 ~]# ipa user-add --first=Foo --last=Bar --principal=fbar3 at IDM.LAB.BOS.REDHAT.COM FBar3
------------------
Added user "fbar3"
------------------
  User login: fbar3
  First name: Foo
  Last name: Bar
  Full name: Foo Bar
  Display name: Foo Bar
  Initials: FB
  Home directory: /home/fbar3
  GECOS field: Foo Bar
  Login shell: /bin/sh
  Kerberos principal: fbar3 at IDM.LAB.BOS.REDHAT.COM
  UID: 63600005
  GID: 63600001
  Keytab: False
  Password: False

I think we should force it to uppercase in split_principal() as we do in
service.py.

Martin




More information about the Freeipa-devel mailing list