[Freeipa-devel] [PATCH] better objectclass uniqueness check

[Simo Sorce]

Rob Crittenden wrote:
> So we store in cn=ipaconfig the list of default objectclasses that users 
> and groups get (so we can avoid hardcoding).
> 
> The problem is that if this changes it presents issues when updating a 
> user for another reason.
> 
> So this fixes several things. First, it does caseless comparisons when 
> considering objectclass but stores the current value to prevent 
> unnecessary LPAP updates.
> 
> Secondly it disables this call altogether on updated entries. I fix the 
> first problem so that when/if we do re-enable it then it will work as 
> expected. New users/groups will still get the default list.
> 
> I've disabled the ability to update these values in the UI as well so we 
> don't run into issues where I've created 10 users, I update the values 
> and create 10 more and their objectclasses are not the same.

ack
Simo.