[Freeipa-devel] [PATCH] 734 Add handling for indirect memberof other entries.

[Rob Crittenden]

This creates a new custom attribute, memberofindirect_[plugin]. Using 
this you can tell the difference between being an actual memberof 
another entry and being a memberof as the result if inheritence. This is 
particularly useful when trying to remove members of an entry, you can 
only remove direct members.

I had to add a couple of short sleep calls to make things work a little 
better. The memberof plugin runs as a postop and we have no way of 
knowing when it has done its work. If we don't pause we may show some 
stale data that memberof hasn't updated yet. .3 seconds is an arbitrary 
choice.

The ticket has an excellent test case for this. Similar tests can be 
done for users/groups and hosts/hostgroups.

ticket 966

rob

-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-rcrit-734-indirect.patch
Type: application/mbox
Size: 18612 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20110219/ef3e846a/attachment.mbox>