Have pynslcd handle mapped userPassword

This fixes an error that could occur when the userPassword was retrieved
from LDAP and insufficient privileges were available for reading the
attribute.

1 files changed, 7 insertions, 2 deletions

diff --git a/pynslcd/group.py b/pynslcd/group.py
index 965148d..375af57 100644
--- a/pynslcd/group.py
+++ b/pynslcd/group.py
@@ -139,8 +139,13 @@ class GroupRequest(common.Request):
     def convert(self, dn, attributes, parameters):
         # get group names and check against requested group name
         names = attributes['cn']
-        # get group group password
-        passwd = attributes['userPassword'][0]
+        # get group password
+        try:
+            passwd = attributes['userPassword'][0]
+        except IndexError:
+            passwd = None
+        if not passwd or self.calleruid != 0:
+            passwd = '*'
         # get group id(s)
         gids = [int(x) for x in attributes['gidNumber']]
         # build member list