Re: [Freeipa-devel] [PATCH] 303 Add range safety check for range_mod and range_del

2012-09-06 Thread Martin Kosek
On Thu, 2012-09-06 at 17:55 +0200, Sumit Bose wrote: > On Wed, Sep 05, 2012 at 05:13:41PM +0200, Martin Kosek wrote: > > range_mod and range_del command could easily create objects with > > ID which is suddenly out of specified range. This could cause issues > > in trust scenarios where range objec

Re: [Freeipa-devel] [PATCH] 303 Add range safety check for range_mod and range_del

2012-09-06 Thread Sumit Bose
On Wed, Sep 05, 2012 at 05:13:41PM +0200, Martin Kosek wrote: > range_mod and range_del command could easily create objects with > ID which is suddenly out of specified range. This could cause issues > in trust scenarios where range objects are used for computation of > remote IDs. > > Add validat

[Freeipa-devel] [PATCH] 303 Add range safety check for range_mod and range_del

2012-09-05 Thread Martin Kosek
range_mod and range_del command could easily create objects with ID which is suddenly out of specified range. This could cause issues in trust scenarios where range objects are used for computation of remote IDs. Add validator for both commands to check if there is any object with ID in the range