summaryrefslogtreecommitdiffstats
path: root/install
diff options
context:
space:
mode:
authorRob Crittenden <rcritten@redhat.com>2012-10-10 22:41:02 -0400
committerRob Crittenden <rcritten@redhat.com>2012-10-10 20:24:10 -0400
commitea4f60b15a2743eb61f27ccd33d7bed17552eade (patch)
tree0328edc627d3ac06ca41464c7a0cae0a0ee4518c /install
parenta51b65d9d40fa09bf33d7dff875e5cba6d51d2d2 (diff)
downloadfreeipa-ea4f60b15a2743eb61f27ccd33d7bed17552eade.tar.gz
freeipa-ea4f60b15a2743eb61f27ccd33d7bed17552eade.tar.xz
freeipa-ea4f60b15a2743eb61f27ccd33d7bed17552eade.zip
Explicitly disable betxn plugins for the time being.
This should work with 389-ds-base 1.2.x and 1.3.0. Without other plugin changes 389-ds-base can deadlock. https://fedorahosted.org/freeipa/ticket/3046
Diffstat (limited to 'install')
-rw-r--r--install/share/Makefile.am1
-rw-r--r--install/share/disable-betxn.ldif61
-rw-r--r--install/updates/10-disable-betxn.update37
-rw-r--r--install/updates/Makefile.am1
4 files changed, 100 insertions, 0 deletions
diff --git a/install/share/Makefile.am b/install/share/Makefile.am
index 23cd766a5..7f953bc42 100644
--- a/install/share/Makefile.am
+++ b/install/share/Makefile.am
@@ -18,6 +18,7 @@ app_DATA = \
default-hbac.ldif \
default-smb-group.ldif \
delegation.ldif \
+ disable-betxn.ldif \
replica-acis.ldif \
ds-nfiles.ldif \
dns.ldif \
diff --git a/install/share/disable-betxn.ldif b/install/share/disable-betxn.ldif
new file mode 100644
index 000000000..57a6858dd
--- /dev/null
+++ b/install/share/disable-betxn.ldif
@@ -0,0 +1,61 @@
+# Disable transactions in 389-ds-base
+
+dn: cn=7-bit check,cn=plugins,cn=config
+changetype: modify
+replace: nsslapd-pluginType
+nsslapd-pluginType: preoperation
+
+dn: cn=attribute uniqueness,cn=plugins,cn=config
+changetype: modify
+replace: nsslapd-pluginType
+nsslapd-pluginType: preoperation
+
+dn: cn=Auto Membership Plugin,cn=plugins,cn=config
+changetype: modify
+replace: nsslapd-pluginType
+nsslapd-pluginType: preoperation
+
+dn: cn=Linked Attributes,cn=plugins,cn=config
+changetype: modify
+replace: nsslapd-pluginType
+nsslapd-pluginType: preoperation
+
+dn: cn=Managed Entries,cn=plugins,cn=config
+changetype: modify
+replace: nsslapd-pluginType
+nsslapd-pluginType: preoperation
+
+dn: cn=MemberOf Plugin,cn=plugins,cn=config
+changetype: modify
+replace: nsslapd-pluginType
+nsslapd-pluginType: postoperation
+
+dn: cn=Multimaster Replication Plugin,cn=plugins,cn=config
+changetype: modify
+replace: nsslapd-pluginbetxn
+nsslapd-pluginbetxn: off
+
+dn: cn=PAM Pass Through Auth,cn=plugins,cn=config
+changetype: modify
+replace: nsslapd-pluginType
+nsslapd-pluginType: preoperation
+
+dn: cn=referential integrity postoperation,cn=plugins,cn=config
+changetype: modify
+replace: nsslapd-pluginType
+nsslapd-pluginType: postoperation
+
+dn: cn=Roles Plugin,cn=plugins,cn=config
+changetype: modify
+replace: nsslapd-pluginbetxn
+nsslapd-pluginbetxn: off
+
+dn: cn=State Change Plugin,cn=plugins,cn=config
+changetype: modify
+replace: nsslapd-pluginType
+nsslapd-pluginType: postoperation
+
+dn: cn=USN,cn=plugins,cn=config
+changetype: modify
+replace: nsslapd-pluginbetxn
+nsslapd-pluginbetxn: off
diff --git a/install/updates/10-disable-betxn.update b/install/updates/10-disable-betxn.update
new file mode 100644
index 000000000..8fca4a5e8
--- /dev/null
+++ b/install/updates/10-disable-betxn.update
@@ -0,0 +1,37 @@
+# Disable transactions in 389-ds-base
+
+dn: cn=7-bit check,cn=plugins,cn=config
+only: nsslapd-pluginType: preoperation
+
+dn: cn=attribute uniqueness,cn=plugins,cn=config
+only: nsslapd-pluginType: preoperation
+
+dn: cn=Auto Membership Plugin,cn=plugins,cn=config
+only: nsslapd-pluginType: preoperation
+
+dn: cn=Linked Attributes,cn=plugins,cn=config
+only: nsslapd-pluginType: preoperation
+
+dn: cn=Managed Entries,cn=plugins,cn=config
+only: nsslapd-pluginType: preoperation
+
+dn: cn=MemberOf Plugin,cn=plugins,cn=config
+only: nsslapd-pluginType: postoperation
+
+dn: cn=Multimaster Replication Plugin,cn=plugins,cn=config
+only: nsslapd-pluginbetxn: off
+
+dn: cn=PAM Pass Through Auth,cn=plugins,cn=config
+only: nsslapd-pluginType: preoperation
+
+dn: cn=referential integrity postoperation,cn=plugins,cn=config
+only: nsslapd-pluginType: postoperation
+
+dn: cn=Roles Plugin,cn=plugins,cn=config
+only: nsslapd-pluginbetxn: off
+
+dn: cn=State Change Plugin,cn=plugins,cn=config
+only: nsslapd-pluginType: postoperation
+
+dn: cn=USN,cn=plugins,cn=config
+only: nsslapd-pluginbetxn: off
diff --git a/install/updates/Makefile.am b/install/updates/Makefile.am
index 8f60bc181..a675af8b4 100644
--- a/install/updates/Makefile.am
+++ b/install/updates/Makefile.am
@@ -7,6 +7,7 @@ app_DATA = \
10-RFC2307bis.update \
10-RFC4876.update \
10-config.update \
+ 10-disable-betxn.update \
10-selinuxusermap.update \
10-sudo.update \
10-ssh.update \