From bcf8ab24d5c8fefdaaf49a50ddce6f8fc8702be1 Mon Sep 17 00:00:00 2001 From: Tomas Babej Date: Mon, 3 Jun 2013 09:56:08 +0200 Subject: Do not check userPassword with 7-bit plugin Default list of attributes that are checked with 7-bit plugin for being 7-bit clean includes userPassword. Consecutively, one is unable to set passwords that contain non-ascii characters. https://fedorahosted.org/freeipa/ticket/3640 --- install/updates/50-7_bit_check.update | 6 ++++++ install/updates/Makefile.am | 1 + 2 files changed, 7 insertions(+) create mode 100644 install/updates/50-7_bit_check.update diff --git a/install/updates/50-7_bit_check.update b/install/updates/50-7_bit_check.update new file mode 100644 index 000000000..b9ea8a97d --- /dev/null +++ b/install/updates/50-7_bit_check.update @@ -0,0 +1,6 @@ +# Remove userPassword from the list of attributes checked by 7-bit plugin +# Replace argument value 'userPassword' with 'mail' to avoid the need to +# shift the whole argument array. Attribute 'mail' is already listed +# in pluginarg1, so it is conveniently used as valid value placeholder. +dn: cn=7-bit check,cn=plugins,cn=config +replace:nsslapd-pluginarg2:userpassword::mail diff --git a/install/updates/Makefile.am b/install/updates/Makefile.am index 787a51cfc..5336f62ed 100644 --- a/install/updates/Makefile.am +++ b/install/updates/Makefile.am @@ -35,6 +35,7 @@ app_DATA = \ 40-automember.update \ 40-otp.update \ 45-roles.update \ + 50-7_bit_check.update \ 50-lockout-policy.update \ 50-groupuuid.update \ 50-hbacservice.update \ -- cgit