diff options
| author | Tomas Babej <tbabej@redhat.com> | 2013-06-03 09:56:08 +0200 |
|---|---|---|
| committer | Martin Kosek <mkosek@redhat.com> | 2013-06-06 18:12:58 +0200 |
| commit | b1cb3ade03346113ab6ce6862dbd2a60070e59ca (patch) | |
| tree | 414350cdfbd3bf72af0dd6705b86cce21795fd81 | |
| parent | efed0643c90f0cc31540351744dd431e6a122a17 (diff) | |
| download | freeipa.git-b1cb3ade03346113ab6ce6862dbd2a60070e59ca.tar.gz freeipa.git-b1cb3ade03346113ab6ce6862dbd2a60070e59ca.tar.xz freeipa.git-b1cb3ade03346113ab6ce6862dbd2a60070e59ca.zip | |
Do not check userPassword with 7-bit plugin
Default list of attributes that are checked with 7-bit plugin
for being 7-bit clean includes userPassword. Consecutively, one
is unable to set passwords that contain non-ascii characters.
https://fedorahosted.org/freeipa/ticket/3640
| -rw-r--r-- | install/updates/50-7_bit_check.update | 6 | ||||
| -rw-r--r-- | install/updates/Makefile.am | 1 |
2 files changed, 7 insertions, 0 deletions
diff --git a/install/updates/50-7_bit_check.update b/install/updates/50-7_bit_check.update new file mode 100644 index 00000000..b9ea8a97 --- /dev/null +++ b/install/updates/50-7_bit_check.update @@ -0,0 +1,6 @@ +# Remove userPassword from the list of attributes checked by 7-bit plugin +# Replace argument value 'userPassword' with 'mail' to avoid the need to +# shift the whole argument array. Attribute 'mail' is already listed +# in pluginarg1, so it is conveniently used as valid value placeholder. +dn: cn=7-bit check,cn=plugins,cn=config +replace:nsslapd-pluginarg2:userpassword::mail diff --git a/install/updates/Makefile.am b/install/updates/Makefile.am index 787a51cf..5336f62e 100644 --- a/install/updates/Makefile.am +++ b/install/updates/Makefile.am @@ -35,6 +35,7 @@ app_DATA = \ 40-automember.update \ 40-otp.update \ 45-roles.update \ + 50-7_bit_check.update \ 50-lockout-policy.update \ 50-groupuuid.update \ 50-hbacservice.update \ |