Hi,

the topology plugin relies on a change in DS to be able to mark replication agreements, this fix is in master and will be in 1.3.3.11 (but I think it is not yet out)


Ludwig

On 05/29/2015 10:33 AM, Martin Basti wrote:
On 29/05/15 09:23, Lukas Slebodnik wrote:
On (12/05/15 21:03), Martin Basti wrote:
On 12/05/15 18:23, Martin Basti wrote:
https://fedorahosted.org/freeipa/ticket/4921

To test this, the mkosek/freeipa-master copr repo with 389-ds-base 1.3.4.0
is needed.

All previous changes to uniqueness plugins were made just in master branch
so upgrade will not work correctly from master to newer master.
>From IPA 4.1 to master should work as expected.
Patch attached.



Updated patch attached.

--
Martin Basti

>From df2f521473a7e4f2438f675e4328ee59c8cf4617 Mon Sep 17 00:00:00 2001
From: Martin Basti <mba...@redhat.com>
Date: Tue, 12 May 2015 18:11:07 +0200
Subject: [PATCH] Server Upgrade: Fix uniqueness plugins

Due previous changes (in master branch only) the uniqueness plugins
became misconfigured.

After this patch:
* whole $SUFFIX will be checked by unique plugins
* just staged users are exluded from check

This reverts some changes in commit
52b7101c1148618d5c8e2ec25576cc7ad3e9b7bb

Since 389-ds-base 1.3.4.a1 new attribute 'uniqueness-exclude-subtrees'
can be used.

https://fedorahosted.org/freeipa/ticket/4921
---
freeipa.spec.in                      |  6 +++---
install/share/unique-attributes.ldif | 12 ++++++------
install/updates/10-uniqueness.update | 20 ++++++--------------
3 files changed, 15 insertions(+), 23 deletions(-)

diff --git a/freeipa.spec.in b/freeipa.spec.in
index 2bf14ef9e14f96b3100d45dd47d749b6bc3b4816..73736455655a100a2febef8e86db2c5a2f2419c9 100644
--- a/freeipa.spec.in
+++ b/freeipa.spec.in
@@ -34,7 +34,7 @@ Source0:        freeipa-%{version}.tar.gz
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)

%if ! %{ONLY_CLIENT}
-BuildRequires:  389-ds-base-devel >= 1.3.3.9
+BuildRequires:  389-ds-base-devel >= 1.3.4.a1
Please revert this change. FreeIPA can be built 1.3.3.9 as well.
and it block scanning pacakge with static analysers even on fedora-rawhide.

I managed to build pacakges with 389-ds-base 1.3.3.9.
It should be sufficient to have Requires for 1.3.4.a1.



BuildRequires:  svrcore-devel
BuildRequires:  policycoreutils >= 2.1.12-5
BuildRequires:  systemd-units
@@ -109,7 +109,7 @@ Group: System Environment/Base
Requires: %{name}-python = %{version}-%{release}
Requires: %{name}-client = %{version}-%{release}
Requires: %{name}-admintools = %{version}-%{release}
-Requires: 389-ds-base >= 1.3.3.9
+Requires: 389-ds-base >= 1.3.4.a1
Requires: openldap-clients > 2.4.35-4
Requires: nss >= 3.14.3-12.0
Requires: nss-tools >= 3.14.3-12.0
@@ -144,7 +144,7 @@ Requires: zip
Requires: policycoreutils >= 2.1.12-5
Requires: tar
Requires(pre): certmonger >= 0.76.8
-Requires(pre): 389-ds-base >= 1.3.3.9
+Requires(pre): 389-ds-base >= 1.3.4.a1
Requires: fontawesome-fonts
Requires: open-sans-fonts
Requires: openssl
LS
Patch attached.




-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Reply via email to