From 34534a026f39e5c5c139d23ab70db72009789e5b Mon Sep 17 00:00:00 2001
From: Rob Crittenden <rcritten@redhat.com>
Date: Fri, 17 Dec 2010 16:57:28 -0500
Subject: Don't use camel-case LDAP attributes in ACI and don't clear
 enrolledBy

We keep LDAP attributes lower-case elsewhere in the API we should do the
same with all access controls.

There were two ACIs pointing at the manage_host_keytab permission. This
isn't allowed in general and we have decided separately to not clear out
enrolledBy when a host is unenrolled so dropping it is the obvious thing
to do.

ticket 597
---
 ipalib/plugins/delegation.py | 1 +
 1 file changed, 1 insertion(+)

(limited to 'ipalib/plugins/delegation.py')

diff --git a/ipalib/plugins/delegation.py b/ipalib/plugins/delegation.py
index b9fc7f14..c233784d 100644
--- a/ipalib/plugins/delegation.py
+++ b/ipalib/plugins/delegation.py
@@ -108,6 +108,7 @@ class delegation(Object):
             cli_name='attrs',
             label=_('Attributes'),
             doc=_('Comma-separated list of attributes'),
+            normalizer=lambda value: value.lower(),
         ),
         Str('memberof',
             cli_name='membergroup',
-- 
cgit