summaryrefslogtreecommitdiffstats
path: root/ipapython/ipaldap.py
diff options
context:
space:
mode:
authorRob Crittenden <rcritten@redhat.com>2013-03-01 15:02:14 -0500
committerRob Crittenden <rcritten@redhat.com>2013-03-13 10:32:36 -0400
commit9005b9bc8aac7c1381aadb7d17107ebbebae005d (patch)
tree15c0b3ce22d95e265130bf8fcb815bdf79e6b4dc /ipapython/ipaldap.py
parent63407ed477035765dda38fbead1353d4f47ac26a (diff)
downloadfreeipa-9005b9bc8aac7c1381aadb7d17107ebbebae005d.tar.gz
freeipa-9005b9bc8aac7c1381aadb7d17107ebbebae005d.tar.xz
freeipa-9005b9bc8aac7c1381aadb7d17107ebbebae005d.zip
Extend ipa-replica-manage to be able to manage DNA ranges.
Attempt to automatically save DNA ranges when a master is removed. This is done by trying to find a master that does not yet define a DNA on-deck range. If one can be found then the range on the deleted master is added. If one cannot be found then it is reported as an error. Some validation of the ranges are done to ensure that they do overlap an IPA local range and do not overlap existing DNA ranges configured on other masters. http://freeipa.org/page/V3/Recover_DNA_Ranges https://fedorahosted.org/freeipa/ticket/3321
Diffstat (limited to 'ipapython/ipaldap.py')
-rw-r--r--ipapython/ipaldap.py2
1 files changed, 2 insertions, 0 deletions
diff --git a/ipapython/ipaldap.py b/ipapython/ipaldap.py
index 10492d178..6873511c4 100644
--- a/ipapython/ipaldap.py
+++ b/ipapython/ipaldap.py
@@ -1806,6 +1806,8 @@ class IPAdmin(LDAPClient):
if removes:
if not force_replace:
modlist.append((ldap.MOD_DELETE, key, removes))
+ elif new_values == []: # delete an empty value
+ modlist.append((ldap.MOD_DELETE, key, removes))
return modlist