On Wed, 2011-05-25 at 19:50 +0200, Martin Kosek wrote: > On Wed, 2011-05-25 at 17:22 +0000, JR Aquino wrote: > > On May 20, 2011, at 7:14 AM, Rob Crittenden wrote: > > > > > JR Aquino wrote: > > >> On May 18, 2011, at 2:52 PM, Rob Crittenden wrote: > > >> > > >>> Rob Crittenden wrote: > > >>>> The Managed Entries plugin configurations weren't being created on > > >>>> replica installs. The templates were there but the cn=config portions > > >>>> were not. > > >>>> > > >>>> This patch adds them as updates. The template portion will be added in > > >>>> the initial replication. > > >>>> > > >>>> ticket 1222 > > >>>> > > >>>> To test: > > >>>> > > >>>> Install a master > > >>>> Install a replica > > >>>> On replica: kinit > > >>>> On replica: ipa user-add --first=timmy --last=test ttest > > >>>> On replica: ipa group-show ttest > > >>>> On master: ipa group-show ttest > > >>>> > > >>>> rob > > >>> > > >>> Updated patch attached. This requires jraquino patch 28 to work as > > >>> expected. > > >>> > > >>> rob > > >>> <freeipa-rcrit-786-2-replica.patch> > > >> > > >> NACK > > >> > > >> This patch is not applying to Master? > > >> > > >> error: patch failed: install/updates/Makefile.am:8 > > >> error: install/updates/Makefile.am: patch does not apply > > >> > > > > > > Rebased, it depended on my patch 769. > > > > ACK > > Please keep in mind that the configuration for UPG plugin needs to be > updated. My patch 67 with new --noprivate option for suppressing UPG > creation for new user changed the originFilter configuration: > > originFilter: (&(objectclass=posixAccount)(!(description=__no_upg__))) > > This patch is not in ipa-2-0 branch, so the originFilter for this branch > is the same as in this patch. > > Martin >
Second ACK from me. I tested upgrading replica and it worked. Still, my statement above is valid - this should be fixed before pushing. As we spoke with Rob today, I wonder if we would want --noprivate option also for ipa-2-0 branch. It may be useful. Martin _______________________________________________ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
