From e74307caa6daf1e7e261ff481f6c5b089df82f57 Mon Sep 17 00:00:00 2001 From: Tomas Babej Date: Mon, 16 Jun 2014 17:33:12 +0200 Subject: ipalib: idrange: Make non-implemented range types fail the validation The ipa-ipa-trust and ipa-ad-winsync ID Range types were allowed to pass the validation tests, however, they are not implemented nor checked by the 389 server plugin. https://fedorahosted.org/freeipa/ticket/4323 Reviewed-By: Jan Cholasta --- ipalib/plugins/idrange.py | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) (limited to 'ipalib/plugins') diff --git a/ipalib/plugins/idrange.py b/ipalib/plugins/idrange.py index 8ffe7bf9a..9e0481e94 100644 --- a/ipalib/plugins/idrange.py +++ b/ipalib/plugins/idrange.py @@ -185,13 +185,14 @@ class idrange(LDAPObject): label = _('ID Ranges') label_singular = _('ID Range') + # The commented range types are planned but not yet supported range_types = { u'ipa-local': unicode(_('local domain range')), - u'ipa-ad-winsync': unicode(_('Active Directory winsync range')), + # u'ipa-ad-winsync': unicode(_('Active Directory winsync range')), u'ipa-ad-trust': unicode(_('Active Directory domain range')), u'ipa-ad-trust-posix': unicode(_('Active Directory trust range with ' 'POSIX attributes')), - u'ipa-ipa-trust': unicode(_('IPA trust range')), + # u'ipa-ipa-trust': unicode(_('IPA trust range')), } takes_params = ( -- cgit