freeipa.git/ipaserver/plugins, branch patternfly

ldap2.has_upg: Raise an error if the UPG definition is not found

2014-05-29T14:22:37+00:00

The UPG Definition is always present in IPA; if it can not be read
it's usually caused by insufficient privileges.
Previously the code assumed the absence of the entry meant that
UPG is disabled. With granular read permissions, this would mean
that users that can add users but can't read UPG Definition would
add users without UPG, and the reason for that would not be very clear.
It is better to fail early if the definition can't be read.

Raise an error if the UPG Definition is not available. This makes
read access to it a prerequisite for adding users.

Part of the work for: https://fedorahosted.org/freeipa/ticket/3566

Reviewed-By: Martin Kosek

ldap2.find_entries: Do not modify attrs_list in-place

2014-05-26T10:39:33+00:00

dap2.find_entries modified the passed in attrs_list to remove
the virtual attributes memberindirect and memberofindirect
before passing the list to LDAP. This means that a call like
    ldap2.get_entry(dn, attrs_list=some_framework_object.default_attributes)
would permanently remove the virtual attributes from
some_framework_object's definition.

Create a copy of the list instead.

https://fedorahosted.org/freeipa/ticket/4349

Reviewed-By: Jan Cholasta

Always use real entry DNs for memberOf in ldap2.

2014-02-24T13:30:23+00:00

https://fedorahosted.org/freeipa/ticket/4192

Reviewed-By: Petr Viktorin

Store old entry state in dict rather than LDAPEntry.

2014-01-10T13:41:39+00:00

https://fedorahosted.org/freeipa/ticket/3488

Convert remaining backend code to LDAPEntry API.

2013-12-16T13:44:19+00:00

Remove unused method get_api of the ldap2 plugin.

2013-11-27T12:46:42+00:00

https://fedorahosted.org/freeipa/ticket/3971

Refactor indirect membership processing.

2013-11-27T12:46:42+00:00

A single LDAP search is now used instead of one search per member.

https://fedorahosted.org/freeipa/ticket/3971

Support searches with paged results control in LDAPClient.

2013-11-27T12:46:41+00:00

https://fedorahosted.org/freeipa/ticket/3971

Move IPA specific code from LDAPClient to the ldap2 plugin.

2013-11-27T12:46:41+00:00

https://fedorahosted.org/freeipa/ticket/3971

Use LDAP modify operation directly to add/remove group members.

2013-07-11T09:39:26+00:00

This prevents getting full member list from LDAP and putting it back later.

https://fedorahosted.org/freeipa/ticket/3706