diff options
author | Simo Sorce <ssorce@redhat.com> | 2011-02-25 18:23:10 -0500 |
---|---|---|
committer | Simo Sorce <ssorce@redhat.com> | 2011-03-01 11:02:55 -0500 |
commit | b6ca0f210c093805f15177761b13070c6c246b34 (patch) | |
tree | a8b3d67799338f76824bac641e2953a50dc4146a | |
parent | 2028695d88cad856d3051abc76fa9254dd3598e2 (diff) | |
download | freeipa-b6ca0f210c093805f15177761b13070c6c246b34.tar.gz freeipa-b6ca0f210c093805f15177761b13070c6c246b34.tar.xz freeipa-b6ca0f210c093805f15177761b13070c6c246b34.zip |
Fix replica setup using replication admin kerberos credentials
Fixes: https://fedorahosted.org/freeipa/ticket/1022
-rw-r--r-- | install/share/replica-acis.ldif | 5 | ||||
-rw-r--r-- | ipaserver/install/replication.py | 3 |
2 files changed, 7 insertions, 1 deletions
diff --git a/install/share/replica-acis.ldif b/install/share/replica-acis.ldif index a2f4cc22..baa62161 100644 --- a/install/share/replica-acis.ldif +++ b/install/share/replica-acis.ldif @@ -1,5 +1,10 @@ # Replica administration +dn: cn=config +changetype: modify +add: aci +aci: (targetattr != aci)(version 3.0; aci "replica admins read access"; allow (read, search, compare) groupdn = "ldap:///cn=Modify Replication Agreements,cn=permissions,cn=pbac,$SUFFIX";) + dn: cn="$SUFFIX",cn=mapping tree,cn=config changetype: modify add: aci diff --git a/ipaserver/install/replication.py b/ipaserver/install/replication.py index 402577f1..c9afc5d4 100644 --- a/ipaserver/install/replication.py +++ b/ipaserver/install/replication.py @@ -592,7 +592,8 @@ class ReplicationManager: return self.wait_for_repl_init(conn, dn) def basic_replication_setup(self, conn, replica_id, repldn, replpw): - self.add_replication_manager(conn, repldn, replpw) + if replpw is not None: + self.add_replication_manager(conn, repldn, replpw) self.replica_config(conn, replica_id, repldn) self.setup_changelog(conn) |