From 3f271a875fa3453de6d2de69ec9360a5ef55f93d Mon Sep 17 00:00:00 2001
From: Kevin McCarthy <kmccarth@redhat.com>
Date: Mon, 8 Oct 2007 13:35:41 -0700
Subject: DELETEs have to come first, in order for "case change" operations to
 work.

---
 ipa-server/ipaserver/ipaldap.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/ipa-server/ipaserver/ipaldap.py b/ipa-server/ipaserver/ipaldap.py
index af983d72..69f040eb 100644
--- a/ipa-server/ipaserver/ipaldap.py
+++ b/ipa-server/ipaserver/ipaldap.py
@@ -429,10 +429,10 @@ class IPAdmin(SimpleLDAPObject):
             adds = list(new_values.difference(old_values))
             removes = list(old_values.difference(new_values))
 
-            if len(adds) > 0:
-                modlist.append((ldap.MOD_ADD, key, adds))
             if len(removes) > 0:
                 modlist.append((ldap.MOD_DELETE, key, removes))
+            if len(adds) > 0:
+                modlist.append((ldap.MOD_ADD, key, adds))
 
         return modlist
 
-- 
cgit