summaryrefslogtreecommitdiffstats
path: root/contrib
diff options
context:
space:
mode:
authorSimo Sorce <ssorce@redhat.com>2008-04-01 18:04:59 -0400
committerSimo Sorce <ssorce@redhat.com>2008-04-01 18:04:59 -0400
commit625d9b2de858beda46203dc492e3046f0b59377a (patch)
tree0e6a9d87a6a3a4bd7830b3f8c5b93fdd30a4ac27 /contrib
parentc260d63245c54b8434b4a1b345f832db8e729e50 (diff)
downloadfreeipa-625d9b2de858beda46203dc492e3046f0b59377a.zip
freeipa-625d9b2de858beda46203dc492e3046f0b59377a.tar.gz
freeipa-625d9b2de858beda46203dc492e3046f0b59377a.tar.xz
- Better defaults for nss_ldap
- Make sure timeouts are not too high, so that machine does not hang if remote servers are not reachable - Make sure root can always login no matter what the status of the ldap servers - use rfc2307bis schema directive
Diffstat (limited to 'contrib')
-rw-r--r--contrib/RHEL4/ipa-client-setup17
1 files changed, 13 insertions, 4 deletions
diff --git a/contrib/RHEL4/ipa-client-setup b/contrib/RHEL4/ipa-client-setup
index df4fd0b..bfc64e7 100644
--- a/contrib/RHEL4/ipa-client-setup
+++ b/contrib/RHEL4/ipa-client-setup
@@ -284,11 +284,20 @@ def main():
opts = [{'name':'comment', 'type':'comment', 'value':'File modified by ipa-client-install'},
{'name':'empty', 'type':'empty'},
- {'name':'nss_base_passwd', 'type':'option', 'value':ipasrv.getBaseDN()+'?sub'},
- {'name':'nss_base_group', 'type':'option', 'value':ipasrv.getBaseDN()+'?sub'},
- {'name':'nss_map_attribute', 'type':'option', 'value':'uniqueMember member'},
- {'name':'base', 'type':'option', 'value':ipasrv.getBaseDN()},
{'name':'ldap_version', 'type':'option', 'value':'3'},
+ {'name':'base', 'type':'option', 'value':ds.getBaseDN()},
+ {'name':'empty', 'type':'empty'},
+ {'name':'nss_base_passwd', 'type':'option', 'value':ds.getBaseDN()+'?sub'},
+ {'name':'nss_base_group', 'type':'option', 'value':ds.getBaseDN()+'?sub'},
+ {'name':'nss_schema', 'type':'option', 'value':'rfc2307bis'},
+ {'name':'nss_map_attribute', 'type':'option', 'value':'uniqueMember member'},
+ {'name':'nss_initgroups_ignoreusers', 'type':'option', 'value':'root,dirsrv'},
+ {'name':'empty', 'type':'empty'},
+ {'name':'nss_reconnect_maxsleeptime', 'type':'option', 'value':'8'},
+ {'name':'nss_reconnect_sleeptime', 'type':'option', 'value':'1'},
+ {'name':'bind_timelimit', 'type':'option', 'value':'5'},
+ {'name':'timelimit', 'type':'option', 'value':'15'},
+ {'name':'empty', 'type':'empty'},
{'name':'uri', 'type':'option', 'value':'ldap://'+ipasrv.getServerName()},
{'name':'empty', 'type':'empty'}]
try: