diff options
| author | Petr Viktorin <pviktori@redhat.com> | 2014-09-12 17:14:14 +0200 |
|---|---|---|
| committer | Martin Kosek <mkosek@redhat.com> | 2014-09-12 17:42:08 +0200 |
| commit | d61fb40542abb0aa66c49d987813099fda356adf (patch) | |
| tree | 3afab3560570546412590f2d7981e1b346b7087d | |
| parent | ab196220fdd886fc2b1998eeee0f8e9a4b384845 (diff) | |
| download | freeipa-d61fb40542abb0aa66c49d987813099fda356adf.tar.gz freeipa-d61fb40542abb0aa66c49d987813099fda356adf.tar.xz freeipa-d61fb40542abb0aa66c49d987813099fda356adf.zip | |
Update referential integrity config for DS 1.3.3
Hisorically DS provided defaults for the referential
integrity plugin in nsslapd-pluginArg*:
nsslapd-pluginarg3: member
nsslapd-pluginarg4: uniquemember
nsslapd-pluginarg5: owner
nsslapd-pluginarg6: seeAlso
In 389-ds 1.3.3, the multi-valued referint-membership-attr
is used instead.
The old way still works, but it requires that the values
are numbered consecutively, so IPA's defaults that started
with 7 were not taken into account.
Convert IPA defaults to use referint-membership-attr.
https://fedorahosted.org/freeipa/ticket/4537
Reviewed-By: Martin Kosek <mkosek@redhat.com>
| -rw-r--r-- | install/share/referint-conf.ldif | 33 | ||||
| -rw-r--r-- | install/updates/25-referint.update | 34 |
2 files changed, 24 insertions, 43 deletions
diff --git a/install/share/referint-conf.ldif b/install/share/referint-conf.ldif index 408f7598a..7c3639582 100644 --- a/install/share/referint-conf.ldif +++ b/install/share/referint-conf.ldif @@ -2,36 +2,3 @@ dn: cn=referential integrity postoperation,cn=plugins,cn=config changetype: modify replace: nsslapd-pluginenabled nsslapd-pluginenabled: on -- -add: nsslapd-pluginArg7 -nsslapd-pluginArg7: manager -- -add: nsslapd-pluginArg8 -nsslapd-pluginArg8: secretary -- -add: nsslapd-pluginArg9 -nsslapd-pluginArg9: memberuser -- -add: nsslapd-pluginArg10 -nsslapd-pluginArg10: memberhost -- -add: nsslapd-pluginArg11 -nsslapd-pluginArg11: sourcehost -- -add: nsslapd-pluginArg12 -nsslapd-pluginArg12: memberservice -- -add: nsslapd-pluginArg13 -nsslapd-pluginArg13: managedby -- -add: nsslapd-pluginArg14 -nsslapd-pluginArg14: memberallowcmd -- -add: nsslapd-pluginArg15 -nsslapd-pluginArg15: memberdenycmd -- -add: nsslapd-pluginArg16 -nsslapd-pluginArg16: ipasudorunas -- -add: nsslapd-pluginArg17 -nsslapd-pluginArg17: ipasudorunasgroup diff --git a/install/updates/25-referint.update b/install/updates/25-referint.update index 65af05128..c4bff5dac 100644 --- a/install/updates/25-referint.update +++ b/install/updates/25-referint.update @@ -2,13 +2,27 @@ # pres and eq indexes defined in 20-indices.update must be set for all these # attributes dn: cn=referential integrity postoperation,cn=plugins,cn=config -add: nsslapd-pluginArg9: memberuser -add: nsslapd-pluginArg10: memberhost -add: nsslapd-pluginArg11: sourcehost -add: nsslapd-pluginArg12: memberservice -add: nsslapd-pluginArg13: managedby -add: nsslapd-pluginArg14: memberallowcmd -add: nsslapd-pluginArg15: memberdenycmd -add: nsslapd-pluginArg16: ipasudorunas -add: nsslapd-pluginArg17: ipasudorunasgroup -add: nsslapd-pluginArg18: ipatokenradiusconfiglink +remove: nsslapd-pluginArg7: manager +remove: nsslapd-pluginArg8: secretary +remove: nsslapd-pluginArg9: memberuser +remove: nsslapd-pluginArg10: memberhost +remove: nsslapd-pluginArg11: sourcehost +remove: nsslapd-pluginArg12: memberservice +remove: nsslapd-pluginArg13: managedby +remove: nsslapd-pluginArg14: memberallowcmd +remove: nsslapd-pluginArg15: memberdenycmd +remove: nsslapd-pluginArg16: ipasudorunas +remove: nsslapd-pluginArg17: ipasudorunasgroup +remove: nsslapd-pluginArg18: ipatokenradiusconfiglink +add: referint-membership-attr: manager +add: referint-membership-attr: secretary +add: referint-membership-attr: memberuser +add: referint-membership-attr: memberhost +add: referint-membership-attr: sourcehost +add: referint-membership-attr: memberservice +add: referint-membership-attr: managedby +add: referint-membership-attr: memberallowcmd +add: referint-membership-attr: memberdenycmd +add: referint-membership-attr: ipasudorunas +add: referint-membership-attr: ipasudorunasgroup +add: referint-membership-attr: ipatokenradiusconfiglink |