diff options
| author | Martin Kosek <mkosek@redhat.com> | 2013-01-10 12:13:39 +0100 |
|---|---|---|
| committer | Martin Kosek <mkosek@redhat.com> | 2013-01-11 10:51:31 +0100 |
| commit | cb7e93bb918a81c51b6ffa36919346386f331900 (patch) | |
| tree | 2560ab4a2a5635b041afd62e02b9233ac185eb7b /ipalib/plugins/aci.py | |
| parent | 746181a88dcec11ba5e11031eeac3840fc052ccb (diff) | |
| download | freeipa-cb7e93bb918a81c51b6ffa36919346386f331900.tar.gz freeipa-cb7e93bb918a81c51b6ffa36919346386f331900.tar.xz freeipa-cb7e93bb918a81c51b6ffa36919346386f331900.zip | |
permission-find no longer crashes with --targetgroup
Target Group parameter was not processed correctly which caused
permission-find to always crash when this search parameter was used.
Fix the crash and create a unit test case to avoid future regression.
https://fedorahosted.org/freeipa/ticket/3335
Diffstat (limited to 'ipalib/plugins/aci.py')
| -rw-r--r-- | ipalib/plugins/aci.py | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/ipalib/plugins/aci.py b/ipalib/plugins/aci.py index 702ae0101..24be17458 100644 --- a/ipalib/plugins/aci.py +++ b/ipalib/plugins/aci.py @@ -815,8 +815,9 @@ class aci_find(crud.Search): found = False if 'target' in a.target: target = a.target['target']['expression'] - if api.env.container_group in target: - targetdn = DN(target.replace('ldap:///','')) + targetdn = DN(target.replace('ldap:///','')) + group_container_dn = DN(api.env.container_group, api.env.basedn) + if targetdn.endswith(group_container_dn): try: cn = targetdn[0]['cn'] except (IndexError, KeyError): |