diff options
| author | Tomas Babej <tbabej@redhat.com> | 2014-07-01 13:29:13 +0200 |
|---|---|---|
| committer | Martin Kosek <mkosek@redhat.com> | 2014-07-02 16:12:05 +0200 |
| commit | a5bb758978ffdccc5a985487d57856290428abf1 (patch) | |
| tree | f6f5caddba25ff092b2b0d3719be7081833025aa /ipapython | |
| parent | 01b95805ab1428e10c79abf70c9bc9e2baf9de21 (diff) | |
| download | freeipa-a5bb758978ffdccc5a985487d57856290428abf1.tar.gz freeipa-a5bb758978ffdccc5a985487d57856290428abf1.tar.xz freeipa-a5bb758978ffdccc5a985487d57856290428abf1.zip | |
ipaldap: Override conversion of nsds5replicalast{update,init}{start,end}
The replication related attributes with generalized time syntax have
special behaviour implemented in 389, as follows:
In case they are explicitly requested for and not set, 0 is returned.
However, 0 is not a valid value for LDAP Generalized time. Thus
we need to add these attributes to the _SYNTAX_OVERRIDE dictionary,
overriding their conversion to datetime and converting them to
string instead, which perserves the old behaviour expected by the
replication codebase.
https://fedorahosted.org/freeipa/ticket/4350
Reviewed-By: Martin Kosek <mkosek@redhat.com>
Diffstat (limited to 'ipapython')
| -rw-r--r-- | ipapython/ipaldap.py | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/ipapython/ipaldap.py b/ipapython/ipaldap.py index 21706cff0..44918c39a 100644 --- a/ipapython/ipaldap.py +++ b/ipapython/ipaldap.py @@ -263,6 +263,10 @@ class IPASimpleLDAPObject(object): 'idnssoamname': DNSName, 'idnssoarname': DNSName, 'dnszoneidnsname': DNSName, + 'nsds5replicalastupdatestart': unicode, + 'nsds5replicalastupdateend': unicode, + 'nsds5replicalastinitstart': unicode, + 'nsds5replicalastinitend': unicode, }) _SINGLE_VALUE_OVERRIDE = CIDict({ 'nsslapd-ssl-check-hostname': True, |