summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorRob Crittenden <rcritten@redhat.com>2011-07-16 13:35:30 -0400
committerRob Crittenden <rcritten@redhat.com>2011-07-17 22:24:30 -0400
commita48a84a5ead90898630a23fc0de1c978d1e0b810 (patch)
treebbbd07ea335d128299bc03fad04bcc068733d146
parentbfee87dced18680de452ad6373e8cc30b19d259f (diff)
downloadfreeipa-a48a84a5ead90898630a23fc0de1c978d1e0b810.tar.gz
freeipa-a48a84a5ead90898630a23fc0de1c978d1e0b810.tar.xz
freeipa-a48a84a5ead90898630a23fc0de1c978d1e0b810.zip
Set the ipa-modrdn plugin precedence to 60 so it runs last
The default precedence for plugins is 50 and the run in more or less alphabetical order (but not guaranteed). This plugin needs to run after the others have already done their work. https://fedorahosted.org/freeipa/ticket/1370
-rw-r--r--install/share/modrdn-krbprinc.ldif1
-rw-r--r--install/updates/10-config.update5
2 files changed, 6 insertions, 0 deletions
diff --git a/install/share/modrdn-krbprinc.ldif b/install/share/modrdn-krbprinc.ldif
index b35ea25f..15e6d3c9 100644
--- a/install/share/modrdn-krbprinc.ldif
+++ b/install/share/modrdn-krbprinc.ldif
@@ -9,3 +9,4 @@ ipaModRDNtargetAttr: krbPrincipalName
ipaModRDNsuffix: @$REALM
ipaModRDNfilter: (&(objectclass=posixaccount)(objectclass=krbPrincipalAux))
ipaModRDNscope: $SUFFIX
+nsslapd-pluginPrecedence: 60
diff --git a/install/updates/10-config.update b/install/updates/10-config.update
index ed703395..b3beefc8 100644
--- a/install/updates/10-config.update
+++ b/install/updates/10-config.update
@@ -3,3 +3,8 @@
# upgrading.
dn: cn=config
only:nsslapd-ssl-check-hostname: on
+
+# Set the precedence of the ipa-modrdn plugin so it runs after other
+# plugins (the default is 50).
+dn: cn=Kerberos Principal Name,cn=IPA MODRDN,cn=plugins,cn=config
+only: nsslapd-pluginPrecedence: 60