diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2010-12-17 16:57:28 -0500 |
|---|---|---|
| committer | Simo Sorce <ssorce@redhat.com> | 2010-12-17 18:04:37 -0500 |
| commit | 34534a026f39e5c5c139d23ab70db72009789e5b (patch) | |
| tree | 7e64d9a94bd2a6c5ac54e54f46e600b539727212 /ipalib/plugins/delegation.py | |
| parent | 7035ffe49ca8456a1efc155c9cb22ec01a881ba2 (diff) | |
| download | freeipa-34534a026f39e5c5c139d23ab70db72009789e5b.tar.gz freeipa-34534a026f39e5c5c139d23ab70db72009789e5b.tar.xz freeipa-34534a026f39e5c5c139d23ab70db72009789e5b.zip | |
Don't use camel-case LDAP attributes in ACI and don't clear enrolledBy
We keep LDAP attributes lower-case elsewhere in the API we should do the
same with all access controls.
There were two ACIs pointing at the manage_host_keytab permission. This
isn't allowed in general and we have decided separately to not clear out
enrolledBy when a host is unenrolled so dropping it is the obvious thing
to do.
ticket 597
Diffstat (limited to 'ipalib/plugins/delegation.py')
| -rw-r--r-- | ipalib/plugins/delegation.py | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/ipalib/plugins/delegation.py b/ipalib/plugins/delegation.py index b9fc7f146..c233784d1 100644 --- a/ipalib/plugins/delegation.py +++ b/ipalib/plugins/delegation.py @@ -108,6 +108,7 @@ class delegation(Object): cli_name='attrs', label=_('Attributes'), doc=_('Comma-separated list of attributes'), + normalizer=lambda value: value.lower(), ), Str('memberof', cli_name='membergroup', |