diff options
Diffstat (limited to 'ipa-server')
| -rw-r--r-- | ipa-server/xmlrpc-server/funcs.py | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/ipa-server/xmlrpc-server/funcs.py b/ipa-server/xmlrpc-server/funcs.py index 74a3030c8..d83fed09e 100644 --- a/ipa-server/xmlrpc-server/funcs.py +++ b/ipa-server/xmlrpc-server/funcs.py @@ -1974,6 +1974,9 @@ class IPAServer: entry = self.get_entry_by_dn(principal, ['dn', 'objectclass'], opts) if entry is None: raise ipaerror.gen_exception(ipaerror.LDAP_NOT_FOUND) + dn_list = ldap.explode_dn(entry['dn'].lower()) + if "cn=kerberos" in dn_list: + raise ipaerror.gen_exception(ipaerror.INPUT_SERVICE_PRINCIPAL_REQUIRED) conn = self.getConnection(opts) try: |