On 04/22/2013 07:30 PM, Petr Viktorin wrote:
Hello,

These patches fix errors in our schema files. The syntax errors would
prevent future versions of 389 from starting.

I haven't done functional testing with development 389 versions, I'll
get in touch with mreynolds for that. So don't push these yet.

https://fedorahosted.org/freeipa/ticket/3578



Another syntax issue was in the updates, attaching an additional fix.

Testing RPMs are available at http://fedorapeople.org/~pviktori/rpms/freeipa-3fd3e61/

--
PetrĀ³

From 3fd3e612ecb1ae55dc8242dc4a5cea236232639c Mon Sep 17 00:00:00 2001
From: Petr Viktorin <pvikt...@redhat.com>
Date: Tue, 23 Apr 2013 12:04:27 +0200
Subject: [PATCH] Fix schema syntax in update file

Fix bad schema syntax in 10-selinuxusermap.update

https://fedorahosted.org/freeipa/ticket/3578
---
 install/updates/10-selinuxusermap.update | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/updates/10-selinuxusermap.update b/install/updates/10-selinuxusermap.update
index f9af01fadb219094ce4a748b417cd25635d1774e..c5a5167a5ddf5ccde143b975f3735bf40e36976c 100644
--- a/install/updates/10-selinuxusermap.update
+++ b/install/updates/10-selinuxusermap.update
@@ -18,7 +18,6 @@ dn: cn=schema
      SUBSTR caseIgnoreSubstringsMatch
      SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE
      X-ORIGIN 'IPA v3')
-     X-ORIGIN 'IPA v3')
 replace:objectClasses:( 2.16.840.1.113730.3.8.2.1 NAME 'ipaGuiConfig' AUXILIARY MAY ( ipaUserSearchFields $$ ipaGroupSearchFields $$ ipaSearchTimeLimit $$ ipaSearchRecordsLimit $$ ipaCustomFields $$ ipaHomesRootDir $$ ipaDefaultLoginShell $$ ipaDefaultPrimaryGroup $$ ipaMaxUsernameLength $$ ipaPwdExpAdvNotify $$ ipaUserObjectClasses $$ ipaGroupObjectClasses $$ ipaDefaultEmailDomain $$ ipaMigrationEnabled $$ ipaCertificateSubjectBase ) )::( 2.16.840.1.113730.3.8.2.1 NAME 'ipaGuiConfig' AUXILIARY MAY ( ipaUserSearchFields $$ ipaGroupSearchFields $$ ipaSearchTimeLimit $$ ipaSearchRecordsLimit $$ ipaCustomFields $$ ipaHomesRootDir $$ ipaDefaultLoginShell $$ ipaDefaultPrimaryGroup $$ ipaMaxUsernameLength $$ ipaPwdExpAdvNotify $$ ipaUserObjectClasses $$ ipaGroupObjectClasses $$ ipaDefaultEmailDomain $$ ipaMigrationEnabled $$ ipaCertificateSubjectBase $$ ipaSELinuxUserMapDefault $$ ipaSELinuxUserMapOrder) )
 
 # Add the default PAC service type relies on the new SELinux user map
@@ -41,6 +40,7 @@ dn: cn=schema
      NAME 'ipaSELinuxUserMap' SUP ipaAssociation
      STRUCTURAL MUST ipaSELinuxUser
      MAY ( accessTime $$ seeAlso )
+     X-ORIGIN 'IPA v3')
 
 # Create the SELinux User map container
 dn: cn=selinux,$SUFFIX
-- 
1.8.1.4

_______________________________________________
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel

Reply via email to