389-ds-base

#50776 Issue 50774 - Account.enroll_certificate() should not check for DS version
Closed by spichugi. Opened by vashirov.
vashirov/389-ds-base ds50774  into  master

Download 50776.patch

Bug Description:

Account.enroll_certificate() assumes that userCertificate can be added
only to nsAccount and does a check for DS version where this objectClass
was introduced.
But userCertificate is a valid attribute for inetOrgPerson objectClass
too. And enroll_certificate() can be used with this objectClass.

Fix Description:

Instead of relying on a DS version we should trust the server to add or
reject an invalid attribute.

Fixes: https://pagure.io/389-ds-base/issue/50774

Reviewed by: ???

Ack.

rebased onto 71cf23ca177c15c548ae70ad0d5a742b14ce7e8d

Pull-Request has been merged by vashirov

389-ds-base is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in 389-ds-base's github repository.

This pull request has been cloned to Github as issue and is available here:
- https://github.com/389ds/389-ds-base/issues/3831

If you want to continue to work on the PR, please navigate to the github issue,
download the patch from the attachments and file a new pull request.

Thank you for understanding. We apologize for all inconvenience.

Pull-Request has been closed by spichugi
Metadata
None
No Tags
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.