From 34520981eeaac5d4f37915509a9e26428e26f5c0 Mon Sep 17 00:00:00 2001
From: Rob Crittenden <rcritten@redhat.com>
Date: Fri, 24 Oct 2008 14:17:20 -0400
Subject: Don't allow service-add to create host/ principals

---
 ipalib/plugins/f_service.py | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'ipalib/plugins/f_service.py')

diff --git a/ipalib/plugins/f_service.py b/ipalib/plugins/f_service.py
index 9e9cec53..f02176ff 100644
--- a/ipalib/plugins/f_service.py
+++ b/ipalib/plugins/f_service.py
@@ -72,6 +72,9 @@ class service_add(crud.Add):
             raise errors.MalformedServicePrincipal
         service = sp[0]
 
+        if service.lower() == "host":
+            raise errors.HostService
+
         sr = sp[1].split('@')
         if len(sr) == 1:
             hostname = sr[0].lower()
-- 
cgit