diff options
author | Martin Babinsky <mbabinsk@redhat.com> | 2015-09-08 17:43:30 +0200 |
---|---|---|
committer | Martin Basti <mbasti@redhat.com> | 2016-06-23 09:48:06 +0200 |
commit | 705f66f7490c64de1adc129221b31927616c485d (patch) | |
tree | cc7138c355431ca285e076af31b5b8b0f8cbdbe8 /ipaserver/plugins/stageuser.py | |
parent | b169a72735fccb170adb5c84ec1bcc10a70e5494 (diff) | |
download | freeipa-705f66f7490c64de1adc129221b31927616c485d.tar.gz freeipa-705f66f7490c64de1adc129221b31927616c485d.tar.xz freeipa-705f66f7490c64de1adc129221b31927616c485d.zip |
IPA API: set krbcanonicalname instead of ipakrbprincipalalias on new entities
Hosts, services, and (stage)-users will now have krbcanonicalname attribute
set to the same value as krbprincipalname on creation. Moreover, new services
will not have ipakrbprincipalalias set anymore.
Part of https://fedorahosted.org/freeipa/ticket/3864
Reviewed-By: David Kupka <dkupka@redhat.com>
Reviewed-By: Simo Sorce <ssorce@redhat.com>
Diffstat (limited to 'ipaserver/plugins/stageuser.py')
-rw-r--r-- | ipaserver/plugins/stageuser.py | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/ipaserver/plugins/stageuser.py b/ipaserver/plugins/stageuser.py index 86b1935f3..9d5d40453 100644 --- a/ipaserver/plugins/stageuser.py +++ b/ipaserver/plugins/stageuser.py @@ -44,6 +44,7 @@ from .baseuser import ( baseuser_add_manager, baseuser_remove_manager) from ipalib.request import context +from ipalib.util import set_krbcanonicalname from ipalib import _, ngettext from ipalib import output from ipaplatform.paths import paths @@ -532,6 +533,8 @@ class stageuser_activate(LDAPQuery): if 'krbprincipalname' not in entry_from: entry_to['krbprincipalname'] = '%s@%s' % (entry_from['uid'][0], api.env.realm) + set_krbcanonicalname(entry_to) + def __dict_new_entry(self, *args, **options): ldap = self.obj.backend |