From 8ea8a7038ea0a9ed23e5569c34535e48008c7884 Mon Sep 17 00:00:00 2001
From: Martin Kosek <mkosek@redhat.com>
Date: Fri, 30 Jan 2015 13:11:30 +0100
Subject: [PATCH] group-detach does not add correct objectclasses

https://fedorahosted.org/freeipa/ticket/4874

Reviewed-By: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
---
 ipalib/plugins/group.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ipalib/plugins/group.py b/ipalib/plugins/group.py
index d25ed9a19..5d33ba217 100644
--- a/ipalib/plugins/group.py
+++ b/ipalib/plugins/group.py
@@ -653,6 +653,7 @@ class group_detach(LDAPQuery):
         objectclasses = list(set(def_objectclass + objectclasses))
 
         group_attrs['mepManagedBy'] = None
+        group_attrs['objectclass'] = objectclasses
         ldap.update_entry(group_attrs)
 
         return dict(