#4221 Prohibit setting --rid-base for ranges of ipa-trust-ad-posix type
Closed: Fixed None Opened 10 years ago by tbabej.

We should not allow setting --rid-base for ranges of ipa-trust-ad-posix since we do not perform any RID -> UID/GID mappings for this ranges (objects have UID/GID set in AD). Thus, setting RID base makes no sense.

Implementation should also make sure it does not break ipa trust_add command, as it currently sets RID base to 0 by default.


Moving stabilization tickets that do not affect FreeIPA 4.0 release usability in any significant way to 4.0.1 stabilization milestone.

FreeIPA 4.0.1 was released, moving to next bugfixing release milestone.

Moving to later 4.1.x - this is not a priority for 4.0.

ipa-4-1:

  • 0b36c10 ranges: prohibit setting --rid-base with ipa-trust-ad-posix type
  • b5aafa4 unittests: baserid for ipa-ad-trust-posix idranges
  • 2983a0d ldapupdater: set baserid to 0 for ipa-ad-trust-posix ranges
  • 0105ef6 idrange: include raw range type in output
  • c2ac4a8 webui: prohibit setting rid base with ipa-trust-ad-posix type

master:

  • 95a492c ranges: prohibit setting --rid-base with ipa-trust-ad-posix type
  • feea904 unittests: baserid for ipa-ad-trust-posix idranges
  • 61d98bd ldapupdater: set baserid to 0 for ipa-ad-trust-posix ranges
  • 3d11de4 idrange: include raw range type in output
  • 8248f69 webui: prohibit setting rid base with ipa-trust-ad-posix type

Metadata Update from @tbabej:
- Issue assigned to pvoborni
- Issue set to the milestone: FreeIPA 4.1.2

7 years ago

Login to comment on this ticket.

Metadata