[Freeipa-devel] [PATCH 0015] Restrict admins group modifications

[Martin Kosek]

On 09/25/2012 02:22 PM, Tomas Babej wrote:
> Hi,
> 
> Group-mod command no longer allows --rename and/or --external
> changes made to the admins group. In such cases, ProtectedEntryError
> is being raised.
> 
> https://fedorahosted.org/freeipa/ticket/3098
> 
> Tomas
> 

Just based on a quick glance, I see few issues:

1) I would like to see unit tests for this scenario

2) Some overlooked debug output:

+        self.log.info(str(keys))

Martin