From 67b2b3408579814f7ff307cfd20bc4250edbea15 Mon Sep 17 00:00:00 2001 From: Martin Basti Date: Thu, 9 Jul 2015 17:17:21 +0200 Subject: Prevent to rename certprofile profile id https://fedorahosted.org/freeipa/ticket/5074 Reviewed-By: Jan Cholasta --- ipalib/plugins/certprofile.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/ipalib/plugins/certprofile.py b/ipalib/plugins/certprofile.py index 6f9a41875..5550ed942 100644 --- a/ipalib/plugins/certprofile.py +++ b/ipalib/plugins/certprofile.py @@ -291,6 +291,9 @@ class certprofile_mod(LDAPUpdate): def pre_callback(self, ldap, dn, entry_attrs, attrs_list, *keys, **options): ca_enabled_check() + # Once a profile id is set it cannot be changed + if 'cn' in entry_attrs: + raise errors.ACIError(info=_('cn is immutable')) if 'file' in options: with self.api.Backend.ra_certprofile as profile_api: profile_api.disable_profile(keys[0]) -- cgit