summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSimo Sorce <ssorce@redhat.com>2011-02-25 18:23:10 -0500
committerSimo Sorce <ssorce@redhat.com>2011-03-01 11:02:55 -0500
commitb6ca0f210c093805f15177761b13070c6c246b34 (patch)
treea8b3d67799338f76824bac641e2953a50dc4146a
parent2028695d88cad856d3051abc76fa9254dd3598e2 (diff)
downloadfreeipa-b6ca0f210c093805f15177761b13070c6c246b34.tar.gz
freeipa-b6ca0f210c093805f15177761b13070c6c246b34.tar.xz
freeipa-b6ca0f210c093805f15177761b13070c6c246b34.zip
Fix replica setup using replication admin kerberos credentials
Fixes: https://fedorahosted.org/freeipa/ticket/1022
-rw-r--r--install/share/replica-acis.ldif5
-rw-r--r--ipaserver/install/replication.py3
2 files changed, 7 insertions, 1 deletions
diff --git a/install/share/replica-acis.ldif b/install/share/replica-acis.ldif
index a2f4cc22..baa62161 100644
--- a/install/share/replica-acis.ldif
+++ b/install/share/replica-acis.ldif
@@ -1,5 +1,10 @@
# Replica administration
+dn: cn=config
+changetype: modify
+add: aci
+aci: (targetattr != aci)(version 3.0; aci "replica admins read access"; allow (read, search, compare) groupdn = "ldap:///cn=Modify Replication Agreements,cn=permissions,cn=pbac,$SUFFIX";)
+
dn: cn="$SUFFIX",cn=mapping tree,cn=config
changetype: modify
add: aci
diff --git a/ipaserver/install/replication.py b/ipaserver/install/replication.py
index 402577f1..c9afc5d4 100644
--- a/ipaserver/install/replication.py
+++ b/ipaserver/install/replication.py
@@ -592,7 +592,8 @@ class ReplicationManager:
return self.wait_for_repl_init(conn, dn)
def basic_replication_setup(self, conn, replica_id, repldn, replpw):
- self.add_replication_manager(conn, repldn, replpw)
+ if replpw is not None:
+ self.add_replication_manager(conn, repldn, replpw)
self.replica_config(conn, replica_id, repldn)
self.setup_changelog(conn)