Imported Debian patch 4.7.2-3

ipaserver/install/plugins/update_managed_permissions.py

@@ -560,7 +560,8 @@ class update_managed_permissions(Updater):
             if current_aci != default_aci:
                 logger.debug('ACIs not compatible')
                 continue
-            all_incompatible = False
+            else:
+                all_incompatible = False
 
             if attrs_in_all_defaults is None:
                 attrs_in_all_defaults = set(default_attrs)
@@ -635,10 +636,6 @@ class update_managed_permissions(Updater):
 
         # Attributes from template
         bindruletype = template.pop('ipapermbindruletype', 'permission')
-        if bindruletype not in {"all", "anonymous", "self", "permission"}:
-            raise ValueError(
-                f"Invalid ipapermbindruletype '{bindruletype}'"
-            )
         if is_new:
             entry.single_value['ipapermbindruletype'] = bindruletype