From ac47b1ca6e902d52e9791f427d3b6f193cbb56b6 Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Sat, 25 Feb 2012 19:02:04 -0500 Subject: Don't consider virtual attributes when validating custom objectclasses We verify user and group default objectclasses when changing them to be sure that required objectclasses aren't being dropped. We need to ignore virtual attributes or it will raise an error because they aren't defined in schema. https://fedorahosted.org/freeipa/ticket/2406 --- ipalib/plugins/config.py | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'ipalib/plugins/config.py') diff --git a/ipalib/plugins/config.py b/ipalib/plugins/config.py index ecf42464..c4615e3d 100644 --- a/ipalib/plugins/config.py +++ b/ipalib/plugins/config.py @@ -239,6 +239,11 @@ class config_mod(LDAPUpdate): for obj_attr in checked_attrs: if obj_attr in OPERATIONAL_ATTRIBUTES: continue + if obj_attr in self.api.Object[obj].params and \ + 'virtual_attribute' in \ + self.api.Object[obj].params[obj_attr].flags: + # skip virtual attributes + continue if obj_attr not in new_allowed_attrs: raise errors.ValidationError(name=attr, error=_('%(obj)s default attribute %(attr)s would not be allowed!') \ -- cgit