[Freeipa-devel] [PATCH] fix account activation
Simo Sorce
ssorce at redhat.com
Mon Mar 31 16:01:32 UTC 2008
On Mon, 2008-03-31 at 11:36 -0400, Rob Crittenden wrote:
> Fix account activation.
>
> We do account activation by using a Class of Service based on group
> membership. A problem can happen if the entry itself has an
> nsaccountlock attribute and you try doing Class of Service work as
> well
> because the local attribute has priority. So try to detect that the
> entry has a local nsAccountLock attribute and report an appropriate
> error.
>
> Don't allow the admins or editors groups to be de-activated.
>
> Return a better error message if account [in]activation fails.
Ack!
Good Job Rob.
Simo.
--
Simo Sorce * Red Hat, Inc * New York
More information about the Freeipa-devel
mailing list