summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorPetr Viktorin <pviktori@redhat.com>2014-09-12 17:14:14 +0200
committerMartin Kosek <mkosek@redhat.com>2014-09-12 17:42:08 +0200
commitd61fb40542abb0aa66c49d987813099fda356adf (patch)
tree3afab3560570546412590f2d7981e1b346b7087d
parentab196220fdd886fc2b1998eeee0f8e9a4b384845 (diff)
downloadfreeipa-d61fb40542abb0aa66c49d987813099fda356adf.zip
freeipa-d61fb40542abb0aa66c49d987813099fda356adf.tar.gz
freeipa-d61fb40542abb0aa66c49d987813099fda356adf.tar.xz
Update referential integrity config for DS 1.3.3
Hisorically DS provided defaults for the referential integrity plugin in nsslapd-pluginArg*: nsslapd-pluginarg3: member nsslapd-pluginarg4: uniquemember nsslapd-pluginarg5: owner nsslapd-pluginarg6: seeAlso In 389-ds 1.3.3, the multi-valued referint-membership-attr is used instead. The old way still works, but it requires that the values are numbered consecutively, so IPA's defaults that started with 7 were not taken into account. Convert IPA defaults to use referint-membership-attr. https://fedorahosted.org/freeipa/ticket/4537 Reviewed-By: Martin Kosek <mkosek@redhat.com>
-rw-r--r--install/share/referint-conf.ldif33
-rw-r--r--install/updates/25-referint.update34
2 files changed, 24 insertions, 43 deletions
diff --git a/install/share/referint-conf.ldif b/install/share/referint-conf.ldif
index 408f759..7c36395 100644
--- a/install/share/referint-conf.ldif
+++ b/install/share/referint-conf.ldif
@@ -2,36 +2,3 @@ dn: cn=referential integrity postoperation,cn=plugins,cn=config
changetype: modify
replace: nsslapd-pluginenabled
nsslapd-pluginenabled: on
--
-add: nsslapd-pluginArg7
-nsslapd-pluginArg7: manager
--
-add: nsslapd-pluginArg8
-nsslapd-pluginArg8: secretary
--
-add: nsslapd-pluginArg9
-nsslapd-pluginArg9: memberuser
--
-add: nsslapd-pluginArg10
-nsslapd-pluginArg10: memberhost
--
-add: nsslapd-pluginArg11
-nsslapd-pluginArg11: sourcehost
--
-add: nsslapd-pluginArg12
-nsslapd-pluginArg12: memberservice
--
-add: nsslapd-pluginArg13
-nsslapd-pluginArg13: managedby
--
-add: nsslapd-pluginArg14
-nsslapd-pluginArg14: memberallowcmd
--
-add: nsslapd-pluginArg15
-nsslapd-pluginArg15: memberdenycmd
--
-add: nsslapd-pluginArg16
-nsslapd-pluginArg16: ipasudorunas
--
-add: nsslapd-pluginArg17
-nsslapd-pluginArg17: ipasudorunasgroup
diff --git a/install/updates/25-referint.update b/install/updates/25-referint.update
index 65af051..c4bff5d 100644
--- a/install/updates/25-referint.update
+++ b/install/updates/25-referint.update
@@ -2,13 +2,27 @@
# pres and eq indexes defined in 20-indices.update must be set for all these
# attributes
dn: cn=referential integrity postoperation,cn=plugins,cn=config
-add: nsslapd-pluginArg9: memberuser
-add: nsslapd-pluginArg10: memberhost
-add: nsslapd-pluginArg11: sourcehost
-add: nsslapd-pluginArg12: memberservice
-add: nsslapd-pluginArg13: managedby
-add: nsslapd-pluginArg14: memberallowcmd
-add: nsslapd-pluginArg15: memberdenycmd
-add: nsslapd-pluginArg16: ipasudorunas
-add: nsslapd-pluginArg17: ipasudorunasgroup
-add: nsslapd-pluginArg18: ipatokenradiusconfiglink
+remove: nsslapd-pluginArg7: manager
+remove: nsslapd-pluginArg8: secretary
+remove: nsslapd-pluginArg9: memberuser
+remove: nsslapd-pluginArg10: memberhost
+remove: nsslapd-pluginArg11: sourcehost
+remove: nsslapd-pluginArg12: memberservice
+remove: nsslapd-pluginArg13: managedby
+remove: nsslapd-pluginArg14: memberallowcmd
+remove: nsslapd-pluginArg15: memberdenycmd
+remove: nsslapd-pluginArg16: ipasudorunas
+remove: nsslapd-pluginArg17: ipasudorunasgroup
+remove: nsslapd-pluginArg18: ipatokenradiusconfiglink
+add: referint-membership-attr: manager
+add: referint-membership-attr: secretary
+add: referint-membership-attr: memberuser
+add: referint-membership-attr: memberhost
+add: referint-membership-attr: sourcehost
+add: referint-membership-attr: memberservice
+add: referint-membership-attr: managedby
+add: referint-membership-attr: memberallowcmd
+add: referint-membership-attr: memberdenycmd
+add: referint-membership-attr: ipasudorunas
+add: referint-membership-attr: ipasudorunasgroup
+add: referint-membership-attr: ipatokenradiusconfiglink