Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for managing idoverrideusers in ipagroup. #487

Merged
merged 1 commit into from
Apr 29, 2022

Conversation

rjeffman
Copy link
Member

@rjeffman rjeffman commented Jan 8, 2021

The CLI option idoverrideusers was not supported by ansible-freeipa,
and this patch adds support to it.

Tests require an AD trust, and a usere aduser@ad.ipa.test to exist.
A new test was added:

tests/group/test_group_idoverrideuser.yml

@rjeffman rjeffman marked this pull request as draft January 8, 2021 13:18
@rjeffman rjeffman marked this pull request as ready for review February 24, 2021 17:16
@darrenjl0
Copy link

Correct me if this is wrong, but from what I can tell there's no way to add ID overrides entries using Ansible anyway?

@rjeffman
Copy link
Member Author

@DazAh no, until this PR is merged.

@darrenjl0
Copy link

@DazAh no, until this PR is merged.

Just to be clear from what I can tell your PR only includes adding a pre existing id user override to a group. Pretty sure adding a user override in the first place is missing which is unfortunate.

@rjeffman rjeffman force-pushed the ipagroup_add_idoverrideuser branch 3 times, most recently from 34ed2ea to 99693ca Compare May 4, 2021 12:09
@rjeffman rjeffman force-pushed the ipagroup_add_idoverrideuser branch from 99693ca to a27e53f Compare May 26, 2021 20:38
@rjeffman rjeffman force-pushed the ipagroup_add_idoverrideuser branch from a27e53f to 17a20ba Compare July 14, 2021 15:02
README-group.md Outdated Show resolved Hide resolved
@rjeffman rjeffman marked this pull request as draft July 22, 2021 11:08
@rjeffman rjeffman changed the title Add support for managing idoverrideusers in ipagroup. WIP: Add support for managing idoverrideusers in ipagroup. Sep 3, 2021
@rjeffman rjeffman added the DRAFT label Jan 17, 2022
@rjeffman rjeffman force-pushed the ipagroup_add_idoverrideuser branch 3 times, most recently from da2e1d8 to 09172cc Compare April 8, 2022 15:42
@rjeffman rjeffman changed the title WIP: Add support for managing idoverrideusers in ipagroup. Add support for managing idoverrideusers in ipagroup. Apr 8, 2022
@rjeffman rjeffman removed the DRAFT label Apr 8, 2022
@rjeffman rjeffman marked this pull request as ready for review April 8, 2022 15:47
@rjeffman rjeffman linked an issue Apr 8, 2022 that may be closed by this pull request
@rjeffman rjeffman force-pushed the ipagroup_add_idoverrideuser branch from 09172cc to cdcd713 Compare April 25, 2022 21:22
@t-woerner
Copy link
Member

t-woerner commented Apr 26, 2022

"group_add_member: group1: Unknown option: idoverrideuser" - The option was added with IPA 4.9.0.

@rjeffman rjeffman force-pushed the ipagroup_add_idoverrideuser branch from cdcd713 to af056ed Compare April 26, 2022 19:51
@rjeffman
Copy link
Member Author

@t-woerner actually, the changes go back to IPA 4.8.7.

I updated the code and tests to reflect this.

The group CLI option `idoverrideusers` was not supported by
ansible-freeipa, and this patch adds support to it.

Tests require an AD trust, and a user `aduser@ad.ipa.test` to exist, or
the user name must be provided (variable, CLI)  through `test_ad_user`.

A new test playbook was added:

    tests/group/test_group_idoverrideuser.yml
@rjeffman rjeffman force-pushed the ipagroup_add_idoverrideuser branch from af056ed to 099eb96 Compare April 27, 2022 10:42
Copy link
Member

@t-woerner t-woerner left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@varunmylaraiah varunmylaraiah self-requested a review April 29, 2022 11:38
Copy link
Collaborator

@varunmylaraiah varunmylaraiah left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Changes and test coverage are LGTM.

@t-woerner t-woerner merged commit ba3fe74 into freeipa:master Apr 29, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

RFE: ipagroup to allow user overides to be managed
4 participants