From 7486ead6c910d13ae4d7cbae6fae738ce2bf47eb Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Tue, 26 Oct 2010 14:31:00 -0400 Subject: Don't allow managed groups to have group password policy. UPG cannot have members and we use memberOf in class of service to determine which policy to apply. ticket 160 --- ipalib/errors.py | 15 +++++++++++++++ 1 file changed, 15 insertions(+) (limited to 'ipalib/errors.py') diff --git a/ipalib/errors.py b/ipalib/errors.py index bce433d2a..79ce42dac 100644 --- a/ipalib/errors.py +++ b/ipalib/errors.py @@ -1095,6 +1095,21 @@ class ManagedGroupError(ExecutionError): errno = 4020 format = _('Deleting a managed group is not allowed. It must be detached first.') +class ManagedPolicyError(ExecutionError): + """ + **4021** Raised when password policy is assigned to a managed group + + For example: + + >>> raise ManagedPolicyError() + Traceback (most recent call last): + ... + ManagedPolicyError: A managed group cannot have a password policy. + """ + + errno = 4021 + format = _('A managed group cannot have a password policy.') + class BuiltinError(ExecutionError): """ **4100** Base class for builtin execution errors (*4100 - 4199*). -- cgit