[Freeipa-devel] [freeipa PR#1714][opened] use LDAP Whoami command when creating an OTP token

[abbra]

   URL: https://github.com/freeipa/freeipa/pull/1714
Author: abbra
 Title: #1714: use LDAP Whoami command when creating an OTP token
Action: opened

PR body:
"""
ipa user-find --whoami is used by ipa otptoken-add to populate
ipaTokenOwner and managedBy attributes. These attributes, in turn are
checked by the self-service ACI which allows to create OTP tokens
assigned to the creator.

With 389-ds-base 1.4.0.6-2.fc28 in Fedora 28 beta there is a bug in
searches with scope 'one' that result in ipa user-find --whoami
returning 0 results.

Because ipa user-find --whoami does not work, non-admin user cannot
create a token. This is a regression that can be fixed by using LDAP
Whoami command.

Fixes: https://pagure.io/freeipa/issue/7456
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1714/head:pr1714
git checkout pr1714