summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJan Cholasta <jcholast@redhat.com>2015-12-01 10:46:00 +0100
committerJan Cholasta <jcholast@redhat.com>2015-12-07 08:14:13 +0100
commit01ddf51df76f3298499973355c5461727e46ab5b (patch)
tree83549409a82562c5deb24eae9482d321303f574b
parent42544484dc1fe6797adb72b4177a0de8dc79a032 (diff)
downloadfreeipa-01ddf51df76f3298499973355c5461727e46ab5b.tar.gz
freeipa-01ddf51df76f3298499973355c5461727e46ab5b.tar.xz
freeipa-01ddf51df76f3298499973355c5461727e46ab5b.zip
custodia: do not modify memberPrincipal on key update
https://fedorahosted.org/freeipa/ticket/5401 Reviewed-By: Martin Basti <mbasti@redhat.com> Reviewed-By: Simo Sorce <ssorce@redhat.com>
-rw-r--r--ipapython/secrets/kem.py3
1 files changed, 1 insertions, 2 deletions
diff --git a/ipapython/secrets/kem.py b/ipapython/secrets/kem.py
index 2a5f384a7..1025ed798 100644
--- a/ipapython/secrets/kem.py
+++ b/ipapython/secrets/kem.py
@@ -122,8 +122,7 @@ class KEMLdap(iSecLdap):
conn.add_s(dn, mods)
except Exception: # pylint: disable=broad-except
# This may fail if the entry already exists
- mods = [(ldap.MOD_REPLACE, 'memberPrincipal', principal),
- (ldap.MOD_REPLACE, 'ipaPublicKey', public_key)]
+ mods = [(ldap.MOD_REPLACE, 'ipaPublicKey', public_key)]
conn.modify_s(dn, mods)