Because of wrong place where ldap_service_search_base is in attribute array in IPA provider, the backend won't start (its trying to load another attribute instead of the search base).
The patch has been pushed to master under the one-liner rule. Jan
From 75640071c2bfc4adc3128ece0a8b5dc3aec4edad Mon Sep 17 00:00:00 2001 From: Jan Zeleny <[email protected]> Date: Wed, 1 Feb 2012 05:26:23 -0500 Subject: [PATCH] Fixed wrong position of ldap_service_search_base The wrong position in configuration directive array caused problems in IPA provider, which tried to fetch another value instead of the services lookup base. --- src/providers/ipa/ipa_common.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/src/providers/ipa/ipa_common.c b/src/providers/ipa/ipa_common.c index c4f2711505d43780023c698974b954d9f8b31ada..259a481c0196fbffebbd2a7d401886deff5b8868 100644 --- a/src/providers/ipa/ipa_common.c +++ b/src/providers/ipa/ipa_common.c @@ -63,10 +63,10 @@ struct dp_option ipa_def_ldap_opts[] = { { "ldap_group_search_base", DP_OPT_STRING, NULL_STRING, NULL_STRING }, { "ldap_group_search_scope", DP_OPT_STRING, { "sub" }, NULL_STRING }, { "ldap_group_search_filter", DP_OPT_STRING, NULL_STRING, NULL_STRING }, + { "ldap_service_search_base", DP_OPT_STRING, NULL_STRING, NULL_STRING }, { "ldap_sudo_search_base", DP_OPT_STRING, NULL_STRING, NULL_STRING }, { "ldap_sudo_refresh_enabled", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE }, { "ldap_sudo_refresh_timeout", DP_OPT_NUMBER, { .number = 300 }, NULL_NUMBER }, - { "ldap_service_search_base", DP_OPT_STRING, NULL_STRING, NULL_STRING }, { "ldap_schema", DP_OPT_STRING, { "ipa_v1" }, NULL_STRING }, { "ldap_offline_timeout", DP_OPT_NUMBER, { .number = 60 }, NULL_NUMBER }, { "ldap_force_upper_case_realm", DP_OPT_BOOL, BOOL_TRUE, BOOL_TRUE }, -- 1.7.6.4
signature.asc
Description: This is a digitally signed message part.
_______________________________________________ sssd-devel mailing list [email protected] https://fedorahosted.org/mailman/listinfo/sssd-devel
