From c1ae716afc49a9d293498a5ee37955bcf7edd983 Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Wed, 26 Mar 2008 23:19:54 -0400 Subject: Normalize member DN's when determining whether they are in a group as a direct or indirect member. 438387 --- ipa-server/xmlrpc-server/funcs.py | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/ipa-server/xmlrpc-server/funcs.py b/ipa-server/xmlrpc-server/funcs.py index 4c346698c..879ff6bee 100644 --- a/ipa-server/xmlrpc-server/funcs.py +++ b/ipa-server/xmlrpc-server/funcs.py @@ -1787,9 +1787,13 @@ class IPAServer: if isinstance(real_members, basestring): real_members = [real_members] + # Normalize all the dns + for i in range(len(real_members)): + real_members[i] = ipaserver.ipaldap.IPAdmin.normalizeDN(real_members[i]) + entries = [0] for e in results: - if e.dn not in real_members: + if ipaserver.ipaldap.IPAdmin.normalizeDN(e.dn) not in real_members: if membertype == 2: entries.append(self.convert_entry(e)) else: -- cgit