diff options
| author | Petr Viktorin <pviktori@redhat.com> | 2012-03-02 12:42:27 -0500 |
|---|---|---|
| committer | Martin Kosek <mkosek@redhat.com> | 2012-03-12 16:02:29 +0100 |
| commit | 1dc11a01d7e2a8e561b3a79aa97bf0939cd3fd25 (patch) | |
| tree | a1b4f8403f163761c2c0bcc070fb178dad8967c9 /ipalib/plugins | |
| parent | 71d134dfa03eb86066eeb331815647bdff04aaa8 (diff) | |
| download | freeipa-1dc11a01d7e2a8e561b3a79aa97bf0939cd3fd25.tar.gz freeipa-1dc11a01d7e2a8e561b3a79aa97bf0939cd3fd25.tar.xz freeipa-1dc11a01d7e2a8e561b3a79aa97bf0939cd3fd25.zip | |
Allow removing sudo commands with special characters from command groups
Previously the commands were compared as serialized strings.
Differences in serializations meant commands with special characters
weren't found in the checked list.
Use the DN class to compare DNs correctly.
https://fedorahosted.org/freeipa/ticket/2483
Diffstat (limited to 'ipalib/plugins')
| -rw-r--r-- | ipalib/plugins/baseldap.py | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/ipalib/plugins/baseldap.py b/ipalib/plugins/baseldap.py index c0f25479a..cf5d8d20e 100644 --- a/ipalib/plugins/baseldap.py +++ b/ipalib/plugins/baseldap.py @@ -1583,8 +1583,8 @@ class LDAPRemoveMember(LDAPModMember): completed = 0 for (attr, objs) in member_dns.iteritems(): - for ldap_obj_name in objs: - for m_dn in member_dns[attr][ldap_obj_name]: + for ldap_obj_name, m_dns in objs.iteritems(): + for m_dn in m_dns: if not m_dn: continue try: |