From 94888d83efbbd3b3ddf194e35d4d10f03bb47bb2 Mon Sep 17 00:00:00 2001
From: Martin Kosek <mkosek@redhat.com>
Date: Fri, 17 Jan 2014 16:13:17 +0100
Subject: [PATCH] Hide trust-resolve command

We do not need to expose a public FreeIPA specific interface to resolve
SIDs to names. The interface is only used internally to resolve SIDs
when external group members are listed. Additionally, the command interface
is not prepared for regular user and can give rather confusing results.

Hide it from CLI. The API itself is still accessible and compatible with
older clients.

https://fedorahosted.org/freeipa/ticket/4113
---
 ipalib/plugins/trust.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ipalib/plugins/trust.py b/ipalib/plugins/trust.py
index 3d412c9c9f518347769e88ddc9089d6d92ccc4be..0b6db27c696cd169c8f4b33128520961c20e3015 100644
--- a/ipalib/plugins/trust.py
+++ b/ipalib/plugins/trust.py
@@ -978,6 +978,7 @@ def idmap_type_string(level):
         return unicode(string)
 
 class trust_resolve(Command):
+    NO_CLI = True
     __doc__ = _('Resolve security identifiers of users and groups in trusted domains')
 
     takes_options = (
-- 
1.8.4.2