We do not need to expose a public FreeIPA specific interface to resolve SIDs to names. The interface is only used internally to resolve SIDs when external group members are listed. Additionally, the command interface is not prepared for regular user and can give rather confusing results.
Hide it from CLI. The API itself is still accessible and compatible with older clients. https://fedorahosted.org/freeipa/ticket/4113 ---- This patch comes from a discussion between developers and testers whether this interface is still useful or not. Give it hides the trust-resolve command from CLI, it obsoletes Alexander's patch 133. Martin
From bc6f4265cc0fcc5d715bbb8df15a9f1e18c3b0fa Mon Sep 17 00:00:00 2001 From: Martin Kosek <mko...@redhat.com> Date: Fri, 17 Jan 2014 16:13:17 +0100 Subject: [PATCH] Hide trust-resolve command We do not need to expose a public FreeIPA specific interface to resolve SIDs to names. The interface is only used internally to resolve SIDs when external group members are listed. Additionally, the command interface is not prepared for regular user and can give rather confusing results. Hide it from CLI. The API itself is still accessible and compatible with older clients. https://fedorahosted.org/freeipa/ticket/4113 --- ipalib/plugins/trust.py | 1 + 1 file changed, 1 insertion(+) diff --git a/ipalib/plugins/trust.py b/ipalib/plugins/trust.py index 3d412c9c9f518347769e88ddc9089d6d92ccc4be..0b6db27c696cd169c8f4b33128520961c20e3015 100644 --- a/ipalib/plugins/trust.py +++ b/ipalib/plugins/trust.py @@ -978,6 +978,7 @@ def idmap_type_string(level): return unicode(string) class trust_resolve(Command): + NO_CLI = True __doc__ = _('Resolve security identifiers of users and groups in trusted domains') takes_options = ( -- 1.8.4.2
_______________________________________________ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
