Issue #5955: slapi-nis should allow password update on a virtual entry - freeipa

freeipa

#5955 slapi-nis should allow password update on a virtual entry

Closed: Fixed Opened Jun 13, 2016 by tbordaz.

If an Active Directory user wants to update its password, he will target the entry in the compat tree.
slapi-nis should "redirect" the ldap req from the compat tree to the real tree.

For this, slapi-nis should implement a pre-extop callback that catches the specific OID 1.3.6.1.4.1.4203.1.11.1 extended op https://www.ietf.org/rfc/rfc3062.txt.
Then mapping the real entry from compat entry, it should set SLAPI_TARGET_SDN with the real entry DN.

tbordaz commented Jun 13, 2016

This ticket has dependencies upon:

https://fedorahosted.org/freeipa/ticket/5946: Enable password change extop to apply on virtual entry like the entry in compat tree
https://fedorahosted.org/389/ticket/48880: adding pre/post extop ability

tbordaz commented Jun 15, 2016

attachment
0001-slapi-nis-should-allow-password-update-on-a-virtual-.patch

pvoborni commented Jul 1, 2016

4.4.0 was released, moving open tickets to 4.4.1

tbordaz commented Jul 21, 2016

This ticket is fixed in slapi-nis 0.56-1

Closing it

tbordaz commented Jul 21, 2016

slapi-nis master