From 705f66f7490c64de1adc129221b31927616c485d Mon Sep 17 00:00:00 2001 From: Martin Babinsky Date: Tue, 8 Sep 2015 17:43:30 +0200 Subject: IPA API: set krbcanonicalname instead of ipakrbprincipalalias on new entities Hosts, services, and (stage)-users will now have krbcanonicalname attribute set to the same value as krbprincipalname on creation. Moreover, new services will not have ipakrbprincipalalias set anymore. Part of https://fedorahosted.org/freeipa/ticket/3864 Reviewed-By: David Kupka Reviewed-By: Simo Sorce --- ipaserver/plugins/baseuser.py | 2 ++ 1 file changed, 2 insertions(+) (limited to 'ipaserver/plugins/baseuser.py') diff --git a/ipaserver/plugins/baseuser.py b/ipaserver/plugins/baseuser.py index bbea403d9..7bb2e8a63 100644 --- a/ipaserver/plugins/baseuser.py +++ b/ipaserver/plugins/baseuser.py @@ -39,6 +39,7 @@ from ipalib.util import ( remove_sshpubkey_from_output_post, remove_sshpubkey_from_output_list_post, add_sshpubkey_to_attrs_pre, + set_krbcanonicalname ) if six.PY3: @@ -497,6 +498,7 @@ class baseuser_add(LDAPCreate): def pre_common_callback(self, ldap, dn, entry_attrs, attrs_list, *keys, **options): assert isinstance(dn, DN) + set_krbcanonicalname(entry_attrs) self.obj.convert_usercertificate_pre(entry_attrs) def post_common_callback(self, ldap, dn, entry_attrs, *keys, **options): -- cgit