-
Notifications
You must be signed in to change notification settings - Fork 32
Monkeypatch out checking for affiliation, as berkeleyEduAffiliations … #140
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
38ad21e to
02ee742
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
You'll need to fix the tests, and I don't think this will actually successfully deploy until I can fix puppetdb, which I will work on.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good besides the tests.
I'd also put a TODO comment by each of these to let people know that they should be re-enabled in the future. Generally otherwise, I'd assume commented-out code could be removed, so giving some reason for why it should stay is a good practice.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
thanks!
heads up: you might want to truncate the first line of your commit. wraps after 72 chars
02ee742 to
6ea4125
Compare
berkeleyEduAffiliations is being removed from anonymous LDAP searches.
f9af792 to
a7f4598
Compare
| attrs_ucb = user_attrs_ucb(attrs['calnetUid']) | ||
| if attrs_ucb and 'EMPLOYEE-TYPE-ACADEMIC' in attrs_ucb['berkeleyEduAffiliations']: | ||
| # TODO: Uncomment when we get a privileged LDAP bind. | ||
| if attrs_ucb: # and 'EMPLOYEE-TYPE-ACADEMIC' in attrs_ucb['berkeleyEduAffiliations']: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This will permit arbitrary members of the OCF to submit vhost requests. You ought to be prepared for that.
…is being removed from anonymous LDAP searches.
please let me know if i missed anything for account creation that uses this attribute