diff options
| author | Alexander Bokovoy <abokovoy@redhat.com> | 2012-06-20 16:08:33 +0300 |
|---|---|---|
| committer | Alexander Bokovoy <abokovoy@redhat.com> | 2012-06-27 17:13:42 +0300 |
| commit | 70d1870e99ccad9ca41c3f40d380f1348b895bb6 (patch) | |
| tree | 71af3fb7544c3582be69fee48a920c00abfa4dc5 /ipalib/plugins/trust.py | |
| parent | 724c685f21117c994b4e4d793c509827be97a56e (diff) | |
| download | freeipa-70d1870e99ccad9ca41c3f40d380f1348b895bb6.tar.gz freeipa-70d1870e99ccad9ca41c3f40d380f1348b895bb6.tar.xz freeipa-70d1870e99ccad9ca41c3f40d380f1348b895bb6.zip | |
Add support for external group members
When using ipaExternalGroup/ipaExternalMember attributes it is
possible to add group members which don't exist in IPA database.
This is primarily is required for AD trusts support and therefore
validation is accepting only secure identifier (SID) format.
https://fedorahosted.org/freeipa/ticket/2664
Diffstat (limited to 'ipalib/plugins/trust.py')
| -rw-r--r-- | ipalib/plugins/trust.py | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/ipalib/plugins/trust.py b/ipalib/plugins/trust.py index 71ca23aba..40bd93e65 100644 --- a/ipalib/plugins/trust.py +++ b/ipalib/plugins/trust.py @@ -171,6 +171,10 @@ class trust_add(LDAPCreate): realm_server = options['realm_server'] trustinstance = ipaserver.dcerpc.TrustDomainJoins(self.api) + if not trustinstance.configured: + raise errors.NotFound(name=_('AD Trust setup'), + reason=_('''Cannot perform join operation without own domain configured. + Make sure you have run ipa-adtrust-install on the IPA server first''')) # 1. Full access to the remote domain. Use admin credentials and # generate random trustdom password to do work on both sides |