diff options
| author | Martin Babinsky <mbabinsk@redhat.com> | 2016-07-01 18:09:04 +0200 |
|---|---|---|
| committer | Petr Vobornik <pvoborni@redhat.com> | 2016-07-15 13:51:03 +0200 |
| commit | 2f02ffed03beac43b26e8521eff87b9489a746f9 (patch) | |
| tree | 5a73f68395167ca1421d4d87ec98f7ac79666e2b /ipapython | |
| parent | a1a7ecdc7bf6686adf8558cedd3964f9e4805469 (diff) | |
| download | freeipa-2f02ffed03beac43b26e8521eff87b9489a746f9.tar.gz freeipa-2f02ffed03beac43b26e8521eff87b9489a746f9.tar.xz freeipa-2f02ffed03beac43b26e8521eff87b9489a746f9.zip | |
Preserve user principal aliases during rename operation
When a MODRDN is performed on the user entry, the MODRDN plugin resets both
krbPrincipalName and krbCanonicalName to the value constructed from uid. In
doing so, hovewer, any principal aliases added to the krbPrincipalName are
wiped clean. In this patch old aliases are fetched before the MODRDN operation
takes place and inserted back after it is performed.
This also preserves previous user logins which can be used further for
authentication as aliases.
https://fedorahosted.org/freeipa/ticket/6028
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Simo Sorce <ssorce@redhat.com>
Diffstat (limited to 'ipapython')
0 files changed, 0 insertions, 0 deletions