[Freeipa-devel] [PATCH] better objectclass uniqueness check

[Rob Crittenden]

So we store in cn=ipaconfig the list of default objectclasses that users 
and groups get (so we can avoid hardcoding).

The problem is that if this changes it presents issues when updating a 
user for another reason.

So this fixes several things. First, it does caseless comparisons when 
considering objectclass but stores the current value to prevent 
unnecessary LPAP updates.

Secondly it disables this call altogether on updated entries. I fix the 
first problem so that when/if we do re-enable it then it will work as 
expected. New users/groups will still get the default list.

I've disabled the ability to update these values in the UI as well so we 
don't run into issues where I've created 10 users, I update the values 
and create 10 more and their objectclasses are not the same.

rob
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-742-objectclass.patch
Type: text/x-patch
Size: 3523 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20080328/2f3e4304/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20080328/2f3e4304/attachment-0001.bin>