diff options
| author | Simo Sorce <ssorce@redhat.com> | 2011-02-25 16:56:15 -0500 |
|---|---|---|
| committer | Simo Sorce <ssorce@redhat.com> | 2011-03-01 11:02:55 -0500 |
| commit | 09dd05b49ac8b5bcb0adcc193e9b943be6471f70 (patch) | |
| tree | d66b7e711d95d41bb3de30223e2bcbe9fbb6cfc4 /daemons/ipa-slapi-plugins/ipa-winsync/ipa-winsync.c | |
| parent | 83549087b5927acd4ac2d8459970881634d5ae76 (diff) | |
| download | freeipa-09dd05b49ac8b5bcb0adcc193e9b943be6471f70.tar.gz freeipa-09dd05b49ac8b5bcb0adcc193e9b943be6471f70.tar.xz freeipa-09dd05b49ac8b5bcb0adcc193e9b943be6471f70.zip | |
Make activated/inactivated groups optional
directly change nsAccountLock on the entry if they are not used
Fixes: https://fedorahosted.org/freeipa/ticket/1021
Diffstat (limited to 'daemons/ipa-slapi-plugins/ipa-winsync/ipa-winsync.c')
| -rw-r--r-- | daemons/ipa-slapi-plugins/ipa-winsync/ipa-winsync.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/daemons/ipa-slapi-plugins/ipa-winsync/ipa-winsync.c b/daemons/ipa-slapi-plugins/ipa-winsync/ipa-winsync.c index b98a34d1f..2644a0108 100644 --- a/daemons/ipa-slapi-plugins/ipa-winsync/ipa-winsync.c +++ b/daemons/ipa-slapi-plugins/ipa-winsync/ipa-winsync.c @@ -885,7 +885,9 @@ sync_acct_disable( } if (direction == ACCT_DISABLE_TO_DS) { - if (!isvirt) { + if (!isvirt || + (ad_is_enabled && (ipaconfig->activated_group_dn == NULL)) || + (!ad_is_enabled && (ipaconfig->inactivated_group_dn == NULL))) { char *attrtype = NULL; char *attrval = NULL; attrtype = "nsAccountLock"; |