[Freeipa-devel] [PATCH] 25 Create Tool for Enabling Disabling Managed Entry

Martin Kosek mkosek at redhat.com
Thu Sep 15 14:50:32 UTC 2011


On Thu, 2011-09-15 at 09:01 -0400, Rob Crittenden wrote:
> Martin Kosek wrote:
> > On Thu, 2011-09-15 at 00:47 +0000, JR Aquino wrote:
> >
> > I think the cleanest solution would be to use ldap.make_filter and
> > ldap.combine_filters functions to play with these filter. You can
> > inspire yourself in this example I wrote for DNS plugin:
> >
> > rev_zone_filter = ldap.make_filter(search_kw, rules=ldap.MATCH_NONE, exact=False,
> >                      trailing_wildcard=False)
> > filter = ldap.combine_filters((rev_zone_filter, filter), rules=ldap.MATCH_ALL)
> 
> I talked to JR about this in irc yesterday and talked him out of using 
> make_filter. We already know what every permutation of these filters is 
> going to look like, building them dynamically seems like overkill.
> 

OK. I did some tests with filter methods we provide (make_filter,
combine_filters, etc.). It easy to build a new filter with them, but we
don't have means to modify an existing one (enable action). So I can
live with the solution that JR has in his current patch.

Martin




More information about the Freeipa-devel mailing list