summaryrefslogtreecommitdiffstats
path: root/ipaserver/plugins/baseuser.py
diff options
context:
space:
mode:
authorMartin Babinsky <mbabinsk@redhat.com>2015-09-08 17:43:30 +0200
committerMartin Basti <mbasti@redhat.com>2016-06-23 09:48:06 +0200
commit705f66f7490c64de1adc129221b31927616c485d (patch)
treecc7138c355431ca285e076af31b5b8b0f8cbdbe8 /ipaserver/plugins/baseuser.py
parentb169a72735fccb170adb5c84ec1bcc10a70e5494 (diff)
downloadfreeipa-705f66f7490c64de1adc129221b31927616c485d.tar.gz
freeipa-705f66f7490c64de1adc129221b31927616c485d.tar.xz
freeipa-705f66f7490c64de1adc129221b31927616c485d.zip
IPA API: set krbcanonicalname instead of ipakrbprincipalalias on new entities
Hosts, services, and (stage)-users will now have krbcanonicalname attribute set to the same value as krbprincipalname on creation. Moreover, new services will not have ipakrbprincipalalias set anymore. Part of https://fedorahosted.org/freeipa/ticket/3864 Reviewed-By: David Kupka <dkupka@redhat.com> Reviewed-By: Simo Sorce <ssorce@redhat.com>
Diffstat (limited to 'ipaserver/plugins/baseuser.py')
-rw-r--r--ipaserver/plugins/baseuser.py2
1 files changed, 2 insertions, 0 deletions
diff --git a/ipaserver/plugins/baseuser.py b/ipaserver/plugins/baseuser.py
index bbea403d9..7bb2e8a63 100644
--- a/ipaserver/plugins/baseuser.py
+++ b/ipaserver/plugins/baseuser.py
@@ -39,6 +39,7 @@ from ipalib.util import (
remove_sshpubkey_from_output_post,
remove_sshpubkey_from_output_list_post,
add_sshpubkey_to_attrs_pre,
+ set_krbcanonicalname
)
if six.PY3:
@@ -497,6 +498,7 @@ class baseuser_add(LDAPCreate):
def pre_common_callback(self, ldap, dn, entry_attrs, attrs_list, *keys,
**options):
assert isinstance(dn, DN)
+ set_krbcanonicalname(entry_attrs)
self.obj.convert_usercertificate_pre(entry_attrs)
def post_common_callback(self, ldap, dn, entry_attrs, *keys, **options):