[Freeipa-devel] [PATCH] Enable filtering search results by member attributes.

[Pavel Zůna]

LDAPSearch base class has now the ability to generate additional
options for objects with member attributes. These options are
used to filter search results - search only for objects without
the specified members.

Any class that extends LDAPSearch can benefit from this functionality.
This patch enables it for the following objects:
group, netgroup, rolegroup, hostgroup, taskgroup

Example:
ipa group-find --no-users=admin

Only direct members are taken into account, but if we need indirect 
members as well - it's not a problem.

Ticket #288

Pavel
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pzuna-freeipa-0042-filterenroll.patch
Type: application/mbox
Size: 5467 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20101129/b3882c50/attachment.mbox>