summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorTomas Babej <tbabej@redhat.com>2013-06-03 09:56:08 +0200
committerMartin Kosek <mkosek@redhat.com>2013-06-06 18:12:50 +0200
commitbcf8ab24d5c8fefdaaf49a50ddce6f8fc8702be1 (patch)
tree45267263040ddd117dac760adbbf1f6f4d20d045
parentadc57707c0ec60141062a6eb9f9d8a3ab5128f7a (diff)
downloadfreeipa-bcf8ab24d5c8fefdaaf49a50ddce6f8fc8702be1.zip
freeipa-bcf8ab24d5c8fefdaaf49a50ddce6f8fc8702be1.tar.gz
freeipa-bcf8ab24d5c8fefdaaf49a50ddce6f8fc8702be1.tar.xz
Do not check userPassword with 7-bit plugin
Default list of attributes that are checked with 7-bit plugin for being 7-bit clean includes userPassword. Consecutively, one is unable to set passwords that contain non-ascii characters. https://fedorahosted.org/freeipa/ticket/3640
-rw-r--r--install/updates/50-7_bit_check.update6
-rw-r--r--install/updates/Makefile.am1
2 files changed, 7 insertions, 0 deletions
diff --git a/install/updates/50-7_bit_check.update b/install/updates/50-7_bit_check.update
new file mode 100644
index 0000000..b9ea8a9
--- /dev/null
+++ b/install/updates/50-7_bit_check.update
@@ -0,0 +1,6 @@
+# Remove userPassword from the list of attributes checked by 7-bit plugin
+# Replace argument value 'userPassword' with 'mail' to avoid the need to
+# shift the whole argument array. Attribute 'mail' is already listed
+# in pluginarg1, so it is conveniently used as valid value placeholder.
+dn: cn=7-bit check,cn=plugins,cn=config
+replace:nsslapd-pluginarg2:userpassword::mail
diff --git a/install/updates/Makefile.am b/install/updates/Makefile.am
index 787a51c..5336f62 100644
--- a/install/updates/Makefile.am
+++ b/install/updates/Makefile.am
@@ -35,6 +35,7 @@ app_DATA = \
40-automember.update \
40-otp.update \
45-roles.update \
+ 50-7_bit_check.update \
50-lockout-policy.update \
50-groupuuid.update \
50-hbacservice.update \