summaryrefslogtreecommitdiffstats
path: root/ipaserver
diff options
context:
space:
mode:
authorRob Crittenden <rcritten@redhat.com>2011-07-01 10:41:42 -0400
committerRob Crittenden <rcritten@redhat.com>2011-07-14 19:11:49 -0400
commit37e3bf2a6096ea18f46501bf5f2a51c55e829595 (patch)
treeeaaeefddf55f8db6ba02346afda9eda854b04503 /ipaserver
parent4bd85ceb90d6b8639c14e68691f2c9f447980c2d (diff)
downloadfreeipa-37e3bf2a6096ea18f46501bf5f2a51c55e829595.zip
freeipa-37e3bf2a6096ea18f46501bf5f2a51c55e829595.tar.gz
freeipa-37e3bf2a6096ea18f46501bf5f2a51c55e829595.tar.xz
Disallow direct modifications to enrolledBy.
This fixes a regression. We don't need to allow enrolledBy to be modified because it gets written in the ipa_enrollment plugin which does internal operations so bypasses acis. https://fedorahosted.org/freeipa/ticket/302
Diffstat (limited to 'ipaserver')
-rw-r--r--ipaserver/install/ldapupdate.py4
1 files changed, 2 insertions, 2 deletions
diff --git a/ipaserver/install/ldapupdate.py b/ipaserver/install/ldapupdate.py
index 2d9c473..9a34cf3 100644
--- a/ipaserver/install/ldapupdate.py
+++ b/ipaserver/install/ldapupdate.py
@@ -483,9 +483,9 @@ class LDAPUpdate:
# skip this update type, it occurs in __delete_entries()
return None
elif utype == 'replace':
- # v has the format "old: new"
+ # v has the format "old:: new"
try:
- (old, new) = v.split(':', 1)
+ (old, new) = v.split('::', 1)
except ValueError:
raise BadSyntax, "bad syntax in replace, needs to be in the format old: new in %s" % v
try: