[Freeipa-devel] [PATCH] fix account activation

[Rob Crittenden]

Fix account activation.

We do account activation by using a Class of Service based on group 
membership. A problem can happen if the entry itself has an 
nsaccountlock attribute and you try doing Class of Service work as well 
because the local attribute has priority. So try to detect that the 
entry has a local nsAccountLock attribute and report an appropriate error.

Don't allow the admins or editors groups to be de-activated.

Return a better error message if account [in]activation fails.

rob
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-772-activation.patch
Type: text/x-patch
Size: 8393 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20080331/38d416e0/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20080331/38d416e0/attachment-0001.bin>