[Freeipa-devel] [PATCH] fix account activation

[Simo Sorce]

On Mon, 2008-03-31 at 11:36 -0400, Rob Crittenden wrote:
> Fix account activation.
> 
> We do account activation by using a Class of Service based on group 
> membership. A problem can happen if the entry itself has an 
> nsaccountlock attribute and you try doing Class of Service work as
> well 
> because the local attribute has priority. So try to detect that the 
> entry has a local nsAccountLock attribute and report an appropriate
> error.
> 
> Don't allow the admins or editors groups to be de-activated.
> 
> Return a better error message if account [in]activation fails.

Ack!
Good Job Rob.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York