summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorRob Crittenden <rcritten@redhat.com>2008-03-03 17:11:38 -0500
committerRob Crittenden <rcritten@redhat.com>2008-03-03 17:11:38 -0500
commitea539229516029067d8bb132830577beeed98551 (patch)
tree308a05cf4deefe453bdca93631f13f73e073e3aa
parent6301914941a355f0d0e1010199716d4c0bbbd867 (diff)
downloadfreeipa-ea539229516029067d8bb132830577beeed98551.tar.gz
freeipa-ea539229516029067d8bb132830577beeed98551.tar.xz
freeipa-ea539229516029067d8bb132830577beeed98551.zip
Filter out K/M and krbtgt principals from the service principals list.
435713
-rw-r--r--ipa-server/xmlrpc-server/funcs.py5
1 files changed, 3 insertions, 2 deletions
diff --git a/ipa-server/xmlrpc-server/funcs.py b/ipa-server/xmlrpc-server/funcs.py
index eeeb2c125..18847955b 100644
--- a/ipa-server/xmlrpc-server/funcs.py
+++ b/ipa-server/xmlrpc-server/funcs.py
@@ -1896,8 +1896,9 @@ class IPAServer:
# TODO - need to parameterize this into generate_match_filters,
# and work it into the field-specification search feature
#
- exact_match_filter = "(&(objectclass=krbPrincipalAux)(!(objectClass=person))(!(krbprincipalname=kadmin/*))%s)" % exact_match_filter
- partial_match_filter = "(&(objectclass=krbPrincipalAux)(!(objectClass=person))(!(krbprincipalname=kadmin/*))%s)" % partial_match_filter
+ exact_match_filter = "(&(objectclass=krbPrincipalAux)(!(objectClass=person))(!(|(krbprincipalname=kadmin/*)(krbprincipalname=K/M@*)(krbprincipalname=krbtgt/*)))%s)" % exact_match_filter
+ partial_match_filter = "(&(objectclass=krbPrincipalAux)(!(objectClass=person))(!(|(krbprincipalname=kadmin/*)(krbprincipalname=K/M@*)(krbprincipalname=krbtgt/*)))%s)" % partial_match_filter
+
conn = self.getConnection(opts)
try: