From 94888d83efbbd3b3ddf194e35d4d10f03bb47bb2 Mon Sep 17 00:00:00 2001

From: Martin Kosek <mkosek@redhat.com>

Date: Fri, 17 Jan 2014 16:13:17 +0100

Subject: [PATCH] Hide trust-resolve command

We do not need to expose a public FreeIPA specific interface to resolve

SIDs to names. The interface is only used internally to resolve SIDs

when external group members are listed. Additionally, the command interface

is not prepared for regular user and can give rather confusing results.

Hide it from CLI. The API itself is still accessible and compatible with

older clients.

https://fedorahosted.org/freeipa/ticket/4113

---

 ipalib/plugins/trust.py | 1 +

 1 file changed, 1 insertion(+)

diff --git a/ipalib/plugins/trust.py b/ipalib/plugins/trust.py

index 3d412c9c9f518347769e88ddc9089d6d92ccc4be..0b6db27c696cd169c8f4b33128520961c20e3015 100644

--- a/ipalib/plugins/trust.py

+++ b/ipalib/plugins/trust.py

@@ -978,6 +978,7 @@ def idmap_type_string(level):

         return unicode(string)

 class trust_resolve(Command):

+    NO_CLI = True

     __doc__ = _('Resolve security identifiers of users and groups in trusted domains')

     takes_options = (

-- 

1.8.4.2