Fix ORDERING in some attributetypes and remove other unnecessary elements.

Looking at the schema in 60basev2.ldif there were many attributes that did
not have an ORDERING matching rule specified correctly. There were also a
number of attributeTypes that should have been just SUP
distinguishedName that had a combination of SUP, SYNTAX, ORDERING, etc.

This requires 389-ds-base-1.2.8.0-1+

ticket 1153

1 files changed, 10 insertions, 4 deletions

diff --git a/ipaserver/ipaldap.py b/ipaserver/ipaldap.py
index b72a43ee3..b933839ab 100644
--- a/ipaserver/ipaldap.py
+++ b/ipaserver/ipaldap.py
@@ -523,10 +523,16 @@ class IPAdmin(SimpleLDAPObject):
             adds = list(new_values.difference(old_values))
             removes = list(old_values.difference(new_values))
 
-            if len(removes) > 0:
-                modlist.append((ldap.MOD_DELETE, key, removes))
-            if len(adds) > 0:
-                modlist.append((ldap.MOD_ADD, key, adds))
+            # You can't remove schema online. An add will automatically
+            # replace any existing schema.
+            if old_entry.get('dn') == 'cn=schema':
+                if len(adds) > 0:
+                    modlist.append((ldap.MOD_ADD, key, adds))
+            else:
+                if len(removes) > 0:
+                    modlist.append((ldap.MOD_DELETE, key, removes))
+                if len(adds) > 0:
+                    modlist.append((ldap.MOD_ADD, key, adds))
 
         return modlist