ipa/freeipa-3.0.0.pre1-010-do-not-change-ldapobject-objectclass-list.patch
2012-08-06 18:17:49 +02:00

36 lines
1.4 KiB
Diff

From 5ba8eeb970a8a72ec189e80e369bb7f70091e409 Mon Sep 17 00:00:00 2001
From: Martin Kosek <mkosek@redhat.com>
Date: Mon, 9 Jul 2012 14:27:07 +0200
Subject: [PATCH 10/79] Do not change LDAPObject objectclass list
__json__ method of LDAPObject may inadvertently append a list of possible
objectclasses to a list of basic objectclasses and thus change a behavior
of all subsequent LDAPSearch command. The command may only return objects
where all "possible" objectclasses are present and thus returning an
incomplete list.
Make sure that the LDAPObject object_class list is not modified during
the __json__ method.
https://fedorahosted.org/freeipa/ticket/2906
---
ipalib/plugins/baseldap.py | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/ipalib/plugins/baseldap.py b/ipalib/plugins/baseldap.py
index b841435fdcb5e28195fd38a6792233fdc4b7e32a..6a37995c57cd9d57280186d15f209426aa0776f2 100644
--- a/ipalib/plugins/baseldap.py
+++ b/ipalib/plugins/baseldap.py
@@ -635,7 +635,7 @@ class LDAPObject(Object):
objectclasses = config.get(
self.object_class_config, objectclasses
)
- objectclasses += self.possible_objectclasses
+ objectclasses = objectclasses + self.possible_objectclasses
# Get list of available attributes for this object for use
# in the ACI UI.
attrs = self.api.Backend.ldap2.schema.attribute_types(objectclasses)
--
1.7.11.2