diff options
| author | Alexander Bokovoy <abokovoy@redhat.com> | 2013-09-05 08:13:53 +0300 |
|---|---|---|
| committer | Petr Viktorin <pviktori@redhat.com> | 2013-09-20 09:59:02 +0200 |
| commit | 9cf8ec79c9e9d05ce9f21b4b187077e1fa650c95 (patch) | |
| tree | 0e0f505cf3167b7a675d0b39e327e73ebae84f29 /ipalib/plugins/group.py | |
| parent | 316a9c215982527814089dc02be95fe14e635006 (diff) | |
| download | freeipa.git-9cf8ec79c9e9d05ce9f21b4b187077e1fa650c95.tar.gz freeipa.git-9cf8ec79c9e9d05ce9f21b4b187077e1fa650c95.tar.xz freeipa.git-9cf8ec79c9e9d05ce9f21b4b187077e1fa650c95.zip | |
ipa-sam: do not modify objectclass when trust object already created
When trust is established, last step done by IPA framework is to set
encryption types associated with the trust. This operation fails due
to ipa-sam attempting to modify object classes in trust object entry
which is not allowed by ACI.
Additionally, wrong handle was used by dcerpc.py code when executing
SetInformationTrustedDomain() against IPA smbd which prevented even to
reach the point where ipa-sam would be asked to modify the trust object.
Diffstat (limited to 'ipalib/plugins/group.py')
0 files changed, 0 insertions, 0 deletions