URL: https://github.com/freeipa/freeipa/pull/444
Title: #444: Allow nsaccountlock to be searched in user-find commands
HonzaCholasta commented:
"""
I see, I assumed that it's not operational because it's not always set. I stand
corrected, but this information does not change anything in
URL: https://github.com/freeipa/freeipa/pull/444
Title: #444: Allow nsaccountlock to be searched in user-find commands
abbra commented:
"""
The nsaccountlock *is* virtual attribute in 389-ds:
attributeTypes: ( 2.16.840.1.113730.3.1.610 NAME 'nsAccountLock'
DESC 'Operational
URL: https://github.com/freeipa/freeipa/pull/539
Title: #539: Define errors_by_code in ipalib.errors
HonzaCholasta commented:
"""
The codes are only relevant for XML-RPC. Why do you need them?
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/539#issuecomment-284319912
--
URL: https://github.com/freeipa/freeipa/pull/444
Title: #444: Allow nsaccountlock to be searched in user-find commands
HonzaCholasta commented:
"""
@abbra, the issue is not that the attribute is not requested (it is in fast
always requested in user commands), it is that when the attribute is
On 03/02/2017 02:54 PM, Simo Sorce wrote:
On Thu, 2017-03-02 at 08:10 +0100, Martin Babinsky wrote:
In this case it would probably be a good idea to think about "forward
compatibility" and define a new AUX objectclass bringing in
'ipaDomainResolutionOrder' instead of extending two separate
URL: https://github.com/freeipa/freeipa/pull/531
Title: #531: httpinstance: disable system trust module in /etc/httpd/alias
HonzaCholasta commented:
"""
Updated to use `modutil -disable` which works even on mod_nss reinstall.
"""
See the full comment at