From c5f319d3e8d1b5e500225af207ac247f75baea17 Mon Sep 17 00:00:00 2001 From: Tomas Babej Date: Wed, 6 May 2015 15:06:56 +0200 Subject: replica-manage: Properly delete nested entries Bad ordering of LDAP entries during replica removal resulted in a failure to delete replica and its services from cn=masters,cn=ipa,cn=etc,$SUFFIX. This patch enforces the correct ordering of entries resulting in proper removal of services before the host entry itself. https://fedorahosted.org/freeipa/ticket/5019 Reviewed-By: Martin Babinsky --- install/tools/ipa-replica-manage | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'install/tools') diff --git a/install/tools/ipa-replica-manage b/install/tools/ipa-replica-manage index 4f92c0c92..0d2688e6d 100755 --- a/install/tools/ipa-replica-manage +++ b/install/tools/ipa-replica-manage @@ -322,7 +322,7 @@ def del_link(realm, replica1, replica2, dirman_passwd, force=False): ipautil.realm_to_suffix(realm)) entries = repl1.conn.get_entries(dn, repl1.conn.SCOPE_SUBTREE) if entries: - entries.sort(key=len, reverse=True) + entries.sort(key=lambda x: len(x.dn), reverse=True) for entry in entries: repl1.conn.delete_entry(entry) except Exception, e: -- cgit