From 35521ad6bb92057d5faefa2059d7d800bebb1af0 Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Mon, 19 Mar 2012 10:16:49 -0400 Subject: Don't allow hosts and services of IPA masters to be disabled. https://fedorahosted.org/freeipa/ticket/2487 --- ipalib/plugins/baseldap.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'ipalib/plugins/baseldap.py') diff --git a/ipalib/plugins/baseldap.py b/ipalib/plugins/baseldap.py index 9562ff98..92540d8a 100644 --- a/ipalib/plugins/baseldap.py +++ b/ipalib/plugins/baseldap.py @@ -396,7 +396,7 @@ def host_is_master(ldap, fqdn): master_dn = str(DN('cn=%s' % fqdn, 'cn=masters,cn=ipa,cn=etc', api.env.basedn)) try: (dn, entry_attrs) = ldap.get_entry(master_dn, ['objectclass']) - raise errors.ValidationError(name='hostname', error=_('An IPA master host cannot be deleted')) + raise errors.ValidationError(name='hostname', error=_('An IPA master host cannot be deleted or disabled')) except errors.NotFound: # Good, not a master return -- cgit