Re: [Freeipa-devel] [PATCH] 1056 sudorule cn uniqueness

2012-10-09 Thread Rob Crittenden
Martin Kosek wrote: On 09/14/2012 05:13 PM, Rob Crittenden wrote: Rob Crittenden wrote: A sudorule dn uses ipaUniqueId as the cn so we have to do a search to ensure uniqueness. This leaves us vulnerable to a race. Configure the uniqueness plugin to ensure no dups. rob Add missing attribute t

Re: [Freeipa-devel] [PATCH] 1056 sudorule cn uniqueness

2012-10-09 Thread Martin Kosek
On 09/14/2012 05:13 PM, Rob Crittenden wrote: > Rob Crittenden wrote: >> A sudorule dn uses ipaUniqueId as the cn so we have to do a search to >> ensure uniqueness. This leaves us vulnerable to a race. Configure the >> uniqueness plugin to ensure no dups. >> >> rob > > Add missing attribute to the

Re: [Freeipa-devel] [PATCH] 1056 sudorule cn uniqueness

2012-09-14 Thread Rob Crittenden
Rob Crittenden wrote: A sudorule dn uses ipaUniqueId as the cn so we have to do a search to ensure uniqueness. This leaves us vulnerable to a race. Configure the uniqueness plugin to ensure no dups. rob Add missing attribute to the fresh install ldif. I had already fixed this in the update, m

[Freeipa-devel] [PATCH] 1056 sudorule cn uniqueness

2012-09-13 Thread Rob Crittenden
A sudorule dn uses ipaUniqueId as the cn so we have to do a search to ensure uniqueness. This leaves us vulnerable to a race. Configure the uniqueness plugin to ensure no dups. rob >From 7f9250d6efe73a56f364173ce730bcddb112aac2 Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Thu, 13 Sep 20