Re: [Freeipa-devel] [PATCH] 1056 sudorule cn uniqueness

2012-10-09 Thread Martin Kosek
On 09/14/2012 05:13 PM, Rob Crittenden wrote: Rob Crittenden wrote: A sudorule dn uses ipaUniqueId as the cn so we have to do a search to ensure uniqueness. This leaves us vulnerable to a race. Configure the uniqueness plugin to ensure no dups. rob Add missing attribute to the fresh

Re: [Freeipa-devel] [PATCH] 1056 sudorule cn uniqueness

2012-09-14 Thread Rob Crittenden
Rob Crittenden wrote: A sudorule dn uses ipaUniqueId as the cn so we have to do a search to ensure uniqueness. This leaves us vulnerable to a race. Configure the uniqueness plugin to ensure no dups. rob Add missing attribute to the fresh install ldif. I had already fixed this in the update,

[Freeipa-devel] [PATCH] 1056 sudorule cn uniqueness

2012-09-13 Thread Rob Crittenden
A sudorule dn uses ipaUniqueId as the cn so we have to do a search to ensure uniqueness. This leaves us vulnerable to a race. Configure the uniqueness plugin to ensure no dups. rob From 7f9250d6efe73a56f364173ce730bcddb112aac2 Mon Sep 17 00:00:00 2001 From: Rob Crittenden rcrit...@redhat.com