freeipa

#5536 topology plugin prevents deletes but does not prevent moddn
Closed: Fixed Opened by simo.

Closed: Fixed
Reopen Issue

I was able to "move-away" a topology segment to a parent DN out of the scope of the topology plugin all the while outright deletion of the segment was not allowed.

The topology plugin should probably not allow that, otherwise it is possible to effectively kill a segment with move+delete instea dof just delete.

master:

  • c152e1007515f208b0c3b84c1ff13a9fe9b45fdf prevent moving of topology entries out of managed scope by modrdn operations

ipa-4-3:

  • d8bfe61e3d71640fac8b5a2ca3c1107bf6aa83f3 prevent moving of topology entries out of managed scope by modrdn operations

Metadata Update from @simo:
- Issue assigned to lkrispen
- Issue set to the milestone: FreeIPA 4.3.1
Metadata
None
None
None
Normal
defect
IPA
0
0
tbordaz, mbasti
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.