diff options
| author | Simo Sorce <ssorce@redhat.com> | 2008-04-01 18:04:59 -0400 |
|---|---|---|
| committer | Simo Sorce <ssorce@redhat.com> | 2008-04-01 18:04:59 -0400 |
| commit | 625d9b2de858beda46203dc492e3046f0b59377a (patch) | |
| tree | 0e6a9d87a6a3a4bd7830b3f8c5b93fdd30a4ac27 /contrib/RHEL4 | |
| parent | c260d63245c54b8434b4a1b345f832db8e729e50 (diff) | |
| download | freeipa-625d9b2de858beda46203dc492e3046f0b59377a.tar.gz freeipa-625d9b2de858beda46203dc492e3046f0b59377a.tar.xz freeipa-625d9b2de858beda46203dc492e3046f0b59377a.zip | |
- Better defaults for nss_ldap
- Make sure timeouts are not too high, so that machine does not hang if remote
servers are not reachable
- Make sure root can always login no matter what the status of the ldap
servers
- use rfc2307bis schema directive
Diffstat (limited to 'contrib/RHEL4')
| -rw-r--r-- | contrib/RHEL4/ipa-client-setup | 17 |
1 files changed, 13 insertions, 4 deletions
diff --git a/contrib/RHEL4/ipa-client-setup b/contrib/RHEL4/ipa-client-setup index df4fd0b6a..bfc64e7bd 100644 --- a/contrib/RHEL4/ipa-client-setup +++ b/contrib/RHEL4/ipa-client-setup @@ -284,11 +284,20 @@ def main(): opts = [{'name':'comment', 'type':'comment', 'value':'File modified by ipa-client-install'}, {'name':'empty', 'type':'empty'}, - {'name':'nss_base_passwd', 'type':'option', 'value':ipasrv.getBaseDN()+'?sub'}, - {'name':'nss_base_group', 'type':'option', 'value':ipasrv.getBaseDN()+'?sub'}, - {'name':'nss_map_attribute', 'type':'option', 'value':'uniqueMember member'}, - {'name':'base', 'type':'option', 'value':ipasrv.getBaseDN()}, {'name':'ldap_version', 'type':'option', 'value':'3'}, + {'name':'base', 'type':'option', 'value':ds.getBaseDN()}, + {'name':'empty', 'type':'empty'}, + {'name':'nss_base_passwd', 'type':'option', 'value':ds.getBaseDN()+'?sub'}, + {'name':'nss_base_group', 'type':'option', 'value':ds.getBaseDN()+'?sub'}, + {'name':'nss_schema', 'type':'option', 'value':'rfc2307bis'}, + {'name':'nss_map_attribute', 'type':'option', 'value':'uniqueMember member'}, + {'name':'nss_initgroups_ignoreusers', 'type':'option', 'value':'root,dirsrv'}, + {'name':'empty', 'type':'empty'}, + {'name':'nss_reconnect_maxsleeptime', 'type':'option', 'value':'8'}, + {'name':'nss_reconnect_sleeptime', 'type':'option', 'value':'1'}, + {'name':'bind_timelimit', 'type':'option', 'value':'5'}, + {'name':'timelimit', 'type':'option', 'value':'15'}, + {'name':'empty', 'type':'empty'}, {'name':'uri', 'type':'option', 'value':'ldap://'+ipasrv.getServerName()}, {'name':'empty', 'type':'empty'}] try: |