diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2011-07-01 10:41:42 -0400 |
|---|---|---|
| committer | Rob Crittenden <rcritten@redhat.com> | 2011-07-14 19:11:49 -0400 |
| commit | 37e3bf2a6096ea18f46501bf5f2a51c55e829595 (patch) | |
| tree | eaaeefddf55f8db6ba02346afda9eda854b04503 /ipaserver/install | |
| parent | 4bd85ceb90d6b8639c14e68691f2c9f447980c2d (diff) | |
| download | freeipa-37e3bf2a6096ea18f46501bf5f2a51c55e829595.tar.gz freeipa-37e3bf2a6096ea18f46501bf5f2a51c55e829595.tar.xz freeipa-37e3bf2a6096ea18f46501bf5f2a51c55e829595.zip | |
Disallow direct modifications to enrolledBy.
This fixes a regression.
We don't need to allow enrolledBy to be modified because it gets
written in the ipa_enrollment plugin which does internal operations
so bypasses acis.
https://fedorahosted.org/freeipa/ticket/302
Diffstat (limited to 'ipaserver/install')
| -rw-r--r-- | ipaserver/install/ldapupdate.py | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/ipaserver/install/ldapupdate.py b/ipaserver/install/ldapupdate.py index 2d9c473d2..9a34cf326 100644 --- a/ipaserver/install/ldapupdate.py +++ b/ipaserver/install/ldapupdate.py @@ -483,9 +483,9 @@ class LDAPUpdate: # skip this update type, it occurs in __delete_entries() return None elif utype == 'replace': - # v has the format "old: new" + # v has the format "old:: new" try: - (old, new) = v.split(':', 1) + (old, new) = v.split('::', 1) except ValueError: raise BadSyntax, "bad syntax in replace, needs to be in the format old: new in %s" % v try: |