[Freeipa-devel] [PATCH] #333 plugin to change kerberos principal name when user is renamed

Rob Crittenden rcritten at redhat.com
Mon Oct 25 14:53:19 UTC 2010


Simo Sorce wrote:
> On Mon, 25 Oct 2010 10:39:06 -0400
> Rob Crittenden<rcritten at redhat.com>  wrote:
>
>> Simo Sorce wrote:
>>> On Fri, 22 Oct 2010 17:46:55 -0400
>>> Rob Crittenden<rcritten at redhat.com>   wrote:
>>>
>>>> Simo Sorce wrote:
>>>>>
>>>>> This plugin intercepts a modrdn change so that when a user is
>>>>> renamed the krbprincipalname is changhed accordingly.
>>>>>
>>>>> The second patch activates the plugin.
>>>>>
>>>>> Simo.
>>>>
>>>> Should ipaModRDNscope be set to the user container instead of
>>>> $SUFFIX?
>>>>
>>>> rob
>>>
>>> Good question, I was tempted but then I thought the filter was
>>> enough.
>>>
>>> I am open to changing it if you feel strongly, though.
>>>
>>> Simo.
>>>
>>
>> Is this going to find users from the compat plugin? If not then it is
>> ok as-is.
>
> Can you do a modrdn modification on a compat plugin entry ?
>
> Simo.
>

Well, right, I don't know :-) And if not, what error would be raised and 
do/should we catch it?

rob




More information about the Freeipa-devel mailing list