From c38e2d7394522a4b4f98f9d7e1ce234fa3be985f Mon Sep 17 00:00:00 2001 From: Nathaniel McCallum Date: Fri, 24 Oct 2014 16:16:50 -0400 Subject: Ensure users exist when assigning tokens to them https://fedorahosted.org/freeipa/ticket/4642 Reviewed-By: Petr Vobornik Reviewed-By: Jan Cholasta --- ipalib/plugins/otptoken.py | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/ipalib/plugins/otptoken.py b/ipalib/plugins/otptoken.py index 77366bafe..f48feeee0 100644 --- a/ipalib/plugins/otptoken.py +++ b/ipalib/plugins/otptoken.py @@ -100,8 +100,11 @@ def _convert_owner(userobj, entry_attrs, options): def _normalize_owner(userobj, entry_attrs): owner = entry_attrs.get('ipatokenowner', None) - if owner is not None: - entry_attrs['ipatokenowner'] = userobj.get_dn(owner) + if owner: + try: + entry_attrs['ipatokenowner'] = userobj._normalize_manager(owner)[0] + except NotFound: + userobj.handle_not_found(owner) def _check_interval(not_before, not_after): if not_before and not_after: -- cgit