From e771fa59ff65545ff1e84f1cd30e06556fabcee3 Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Fri, 19 Jul 2019 08:55:02 -0400 Subject: [PATCH] Remove posixAccount from service_find search filter This will allow cifs principals to be found. They were suppressed because they include objectclass=posixAccount. This is a bit of a historical anomaly. This was included in the filter from the initial commit (though it was person, not posixAccount). I believe it was a mistake from the beginning but it wasn't noticed because it didn't cause any obvious issues. https://pagure.io/freeipa/issue/8013 Reviewed-By: Alexander Bokovoy --- ipaserver/plugins/service.py | 1 - 1 file changed, 1 deletion(-) diff --git a/ipaserver/plugins/service.py b/ipaserver/plugins/service.py index f58fe4b44..c118b80a4 100644 --- a/ipaserver/plugins/service.py +++ b/ipaserver/plugins/service.py @@ -889,7 +889,6 @@ class service_find(LDAPSearch): assert isinstance(base_dn, DN) # lisp style! custom_filter = '(&(objectclass=ipaService)' \ - '(!(objectClass=posixAccount))' \ '(!(|(krbprincipalname=kadmin/*)' \ '(krbprincipalname=K/M@*)' \ '(krbprincipalname=krbtgt/*))' \