https://fedorahosted.org/freeipa/ticket/4537
See commit message for the story behind this one.
--
Petr³
From e36ecfee32a331bfd031a48df2abe7e0ce8ec987 Mon Sep 17 00:00:00 2001
From: Petr Viktorin <pvikt...@redhat.com>
Date: Fri, 12 Sep 2014 17:14:14 +0200
Subject: [PATCH] Update referential integrity config for DS 1.3.3
Hisorically DS provided defaults for the referential
integrity plugin in nsslapd-pluginArg*:
nsslapd-pluginarg3: member
nsslapd-pluginarg4: uniquemember
nsslapd-pluginarg5: owner
nsslapd-pluginarg6: seeAlso
In 389-ds 1.3.3, the multi-valued referint-membership-attr
is used instead.
The old way still works, but it requires that the values
are numbered consecutively, so IPA's defaults that started
with 7 were not taken into account.
Convert IPA defaults to use referint-membership-attr.
https://fedorahosted.org/freeipa/ticket/4537
---
install/share/referint-conf.ldif | 33 ---------------------------------
install/updates/25-referint.update | 34 ++++++++++++++++++++++++----------
2 files changed, 24 insertions(+), 43 deletions(-)
diff --git a/install/share/referint-conf.ldif b/install/share/referint-conf.ldif
index 408f7598a2127a33373ec26d4f4ea1ab7ed73734..7c36395828580b677b8acef33625847609362eca 100644
--- a/install/share/referint-conf.ldif
+++ b/install/share/referint-conf.ldif
@@ -2,36 +2,3 @@ dn: cn=referential integrity postoperation,cn=plugins,cn=config
changetype: modify
replace: nsslapd-pluginenabled
nsslapd-pluginenabled: on
--
-add: nsslapd-pluginArg7
-nsslapd-pluginArg7: manager
--
-add: nsslapd-pluginArg8
-nsslapd-pluginArg8: secretary
--
-add: nsslapd-pluginArg9
-nsslapd-pluginArg9: memberuser
--
-add: nsslapd-pluginArg10
-nsslapd-pluginArg10: memberhost
--
-add: nsslapd-pluginArg11
-nsslapd-pluginArg11: sourcehost
--
-add: nsslapd-pluginArg12
-nsslapd-pluginArg12: memberservice
--
-add: nsslapd-pluginArg13
-nsslapd-pluginArg13: managedby
--
-add: nsslapd-pluginArg14
-nsslapd-pluginArg14: memberallowcmd
--
-add: nsslapd-pluginArg15
-nsslapd-pluginArg15: memberdenycmd
--
-add: nsslapd-pluginArg16
-nsslapd-pluginArg16: ipasudorunas
--
-add: nsslapd-pluginArg17
-nsslapd-pluginArg17: ipasudorunasgroup
diff --git a/install/updates/25-referint.update b/install/updates/25-referint.update
index 65af05128e433d683d61272cad6145fa8f084b04..c4bff5dac4956eb0ef4b132a2ce5dafdb53e286e 100644
--- a/install/updates/25-referint.update
+++ b/install/updates/25-referint.update
@@ -2,13 +2,27 @@
# pres and eq indexes defined in 20-indices.update must be set for all these
# attributes
dn: cn=referential integrity postoperation,cn=plugins,cn=config
-add: nsslapd-pluginArg9: memberuser
-add: nsslapd-pluginArg10: memberhost
-add: nsslapd-pluginArg11: sourcehost
-add: nsslapd-pluginArg12: memberservice
-add: nsslapd-pluginArg13: managedby
-add: nsslapd-pluginArg14: memberallowcmd
-add: nsslapd-pluginArg15: memberdenycmd
-add: nsslapd-pluginArg16: ipasudorunas
-add: nsslapd-pluginArg17: ipasudorunasgroup
-add: nsslapd-pluginArg18: ipatokenradiusconfiglink
+remove: nsslapd-pluginArg7: manager
+remove: nsslapd-pluginArg8: secretary
+remove: nsslapd-pluginArg9: memberuser
+remove: nsslapd-pluginArg10: memberhost
+remove: nsslapd-pluginArg11: sourcehost
+remove: nsslapd-pluginArg12: memberservice
+remove: nsslapd-pluginArg13: managedby
+remove: nsslapd-pluginArg14: memberallowcmd
+remove: nsslapd-pluginArg15: memberdenycmd
+remove: nsslapd-pluginArg16: ipasudorunas
+remove: nsslapd-pluginArg17: ipasudorunasgroup
+remove: nsslapd-pluginArg18: ipatokenradiusconfiglink
+add: referint-membership-attr: manager
+add: referint-membership-attr: secretary
+add: referint-membership-attr: memberuser
+add: referint-membership-attr: memberhost
+add: referint-membership-attr: sourcehost
+add: referint-membership-attr: memberservice
+add: referint-membership-attr: managedby
+add: referint-membership-attr: memberallowcmd
+add: referint-membership-attr: memberdenycmd
+add: referint-membership-attr: ipasudorunas
+add: referint-membership-attr: ipasudorunasgroup
+add: referint-membership-attr: ipatokenradiusconfiglink
--
1.9.3
_______________________________________________
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel
