Hi,
the topology plugin relies on a change in DS to be able to mark
replication agreements, this fix is in master and will be in 1.3.3.11
(but I think it is not yet out)
Ludwig
On 05/29/2015 10:33 AM, Martin Basti wrote:
On 29/05/15 09:23, Lukas Slebodnik wrote:
On (12/05/15 21:03), Martin Basti wrote:
On 12/05/15 18:23, Martin Basti wrote:
https://fedorahosted.org/freeipa/ticket/4921
To test this, the mkosek/freeipa-master copr repo with 389-ds-base
1.3.4.0
is needed.
All previous changes to uniqueness plugins were made just in master
branch
so upgrade will not work correctly from master to newer master.
>From IPA 4.1 to master should work as expected.
Patch attached.
Updated patch attached.
--
Martin Basti
>From df2f521473a7e4f2438f675e4328ee59c8cf4617 Mon Sep 17 00:00:00 2001
From: Martin Basti <mba...@redhat.com>
Date: Tue, 12 May 2015 18:11:07 +0200
Subject: [PATCH] Server Upgrade: Fix uniqueness plugins
Due previous changes (in master branch only) the uniqueness plugins
became misconfigured.
After this patch:
* whole $SUFFIX will be checked by unique plugins
* just staged users are exluded from check
This reverts some changes in commit
52b7101c1148618d5c8e2ec25576cc7ad3e9b7bb
Since 389-ds-base 1.3.4.a1 new attribute 'uniqueness-exclude-subtrees'
can be used.
https://fedorahosted.org/freeipa/ticket/4921
---
freeipa.spec.in | 6 +++---
install/share/unique-attributes.ldif | 12 ++++++------
install/updates/10-uniqueness.update | 20 ++++++--------------
3 files changed, 15 insertions(+), 23 deletions(-)
diff --git a/freeipa.spec.in b/freeipa.spec.in
index
2bf14ef9e14f96b3100d45dd47d749b6bc3b4816..73736455655a100a2febef8e86db2c5a2f2419c9
100644
--- a/freeipa.spec.in
+++ b/freeipa.spec.in
@@ -34,7 +34,7 @@ Source0: freeipa-%{version}.tar.gz
BuildRoot:
%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
%if ! %{ONLY_CLIENT}
-BuildRequires: 389-ds-base-devel >= 1.3.3.9
+BuildRequires: 389-ds-base-devel >= 1.3.4.a1
Please revert this change. FreeIPA can be built 1.3.3.9 as well.
and it block scanning pacakge with static analysers even on
fedora-rawhide.
I managed to build pacakges with 389-ds-base 1.3.3.9.
It should be sufficient to have Requires for 1.3.4.a1.
BuildRequires: svrcore-devel
BuildRequires: policycoreutils >= 2.1.12-5
BuildRequires: systemd-units
@@ -109,7 +109,7 @@ Group: System Environment/Base
Requires: %{name}-python = %{version}-%{release}
Requires: %{name}-client = %{version}-%{release}
Requires: %{name}-admintools = %{version}-%{release}
-Requires: 389-ds-base >= 1.3.3.9
+Requires: 389-ds-base >= 1.3.4.a1
Requires: openldap-clients > 2.4.35-4
Requires: nss >= 3.14.3-12.0
Requires: nss-tools >= 3.14.3-12.0
@@ -144,7 +144,7 @@ Requires: zip
Requires: policycoreutils >= 2.1.12-5
Requires: tar
Requires(pre): certmonger >= 0.76.8
-Requires(pre): 389-ds-base >= 1.3.3.9
+Requires(pre): 389-ds-base >= 1.3.4.a1
Requires: fontawesome-fonts
Requires: open-sans-fonts
Requires: openssl
LS
Patch attached.
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
