Martin Babinsky 2f02ffed03 Preserve user principal aliases during rename operation ...

When a MODRDN is performed on the user entry, the MODRDN plugin resets both
krbPrincipalName and krbCanonicalName to the value constructed from uid. In
doing so, hovewer, any principal aliases added to the krbPrincipalName are
wiped clean. In this patch old aliases are fetched before the MODRDN operation
takes place and inserted back after it is performed.

This also preserves previous user logins which can be used further for
authentication as aliases.

https://fedorahosted.org/freeipa/ticket/6028

Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Simo Sorce <ssorce@redhat.com>

2016-07-15 13:51:03 +02:00

..

advise

ipa-advise: correct handling of plugin namespace iteration

2016-07-12 11:02:52 +02:00

install

uninstall: untrack lightweight CA certs

2016-07-12 10:50:52 +02:00

plugins

Preserve user principal aliases during rename operation

2016-07-15 13:51:03 +02:00

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

dcerpc.py

session: move the session module from ipalib to ipaserver

2016-06-30 14:09:24 +02:00

dns_data_management.py

DNS Locations: cleanup of bininstance

2016-06-28 15:23:51 +02:00

rpcserver.py

server: exclude Local commands from RPC

2016-06-30 16:32:20 +02:00

servroles.py

Introduce "NTP server" role

2016-06-15 13:51:48 +02:00

session.py

session: do not initialize session manager on import

2016-06-30 14:09:24 +02:00

topology.py

Fix topologysuffix-verify failing connections

2016-06-24 13:32:02 +02:00