From c6baecec1ec866d77f9a476d01c7931fce6d95da Mon Sep 17 00:00:00 2001 From: Petr Viktorin Date: Fri, 12 Sep 2014 17:14:14 +0200 Subject: Update referential integrity config for DS 1.3.3 Hisorically DS provided defaults for the referential integrity plugin in nsslapd-pluginArg*: nsslapd-pluginarg3: member nsslapd-pluginarg4: uniquemember nsslapd-pluginarg5: owner nsslapd-pluginarg6: seeAlso In 389-ds 1.3.3, the multi-valued referint-membership-attr is used instead. The old way still works, but it requires that the values are numbered consecutively, so IPA's defaults that started with 7 were not taken into account. Convert IPA defaults to use referint-membership-attr. https://fedorahosted.org/freeipa/ticket/4537 Reviewed-By: Martin Kosek --- install/share/referint-conf.ldif | 33 --------------------------------- install/updates/25-referint.update | 34 ++++++++++++++++++++++++---------- 2 files changed, 24 insertions(+), 43 deletions(-) diff --git a/install/share/referint-conf.ldif b/install/share/referint-conf.ldif index 408f7598a..7c3639582 100644 --- a/install/share/referint-conf.ldif +++ b/install/share/referint-conf.ldif @@ -2,36 +2,3 @@ dn: cn=referential integrity postoperation,cn=plugins,cn=config changetype: modify replace: nsslapd-pluginenabled nsslapd-pluginenabled: on -- -add: nsslapd-pluginArg7 -nsslapd-pluginArg7: manager -- -add: nsslapd-pluginArg8 -nsslapd-pluginArg8: secretary -- -add: nsslapd-pluginArg9 -nsslapd-pluginArg9: memberuser -- -add: nsslapd-pluginArg10 -nsslapd-pluginArg10: memberhost -- -add: nsslapd-pluginArg11 -nsslapd-pluginArg11: sourcehost -- -add: nsslapd-pluginArg12 -nsslapd-pluginArg12: memberservice -- -add: nsslapd-pluginArg13 -nsslapd-pluginArg13: managedby -- -add: nsslapd-pluginArg14 -nsslapd-pluginArg14: memberallowcmd -- -add: nsslapd-pluginArg15 -nsslapd-pluginArg15: memberdenycmd -- -add: nsslapd-pluginArg16 -nsslapd-pluginArg16: ipasudorunas -- -add: nsslapd-pluginArg17 -nsslapd-pluginArg17: ipasudorunasgroup diff --git a/install/updates/25-referint.update b/install/updates/25-referint.update index 65af05128..c4bff5dac 100644 --- a/install/updates/25-referint.update +++ b/install/updates/25-referint.update @@ -2,13 +2,27 @@ # pres and eq indexes defined in 20-indices.update must be set for all these # attributes dn: cn=referential integrity postoperation,cn=plugins,cn=config -add: nsslapd-pluginArg9: memberuser -add: nsslapd-pluginArg10: memberhost -add: nsslapd-pluginArg11: sourcehost -add: nsslapd-pluginArg12: memberservice -add: nsslapd-pluginArg13: managedby -add: nsslapd-pluginArg14: memberallowcmd -add: nsslapd-pluginArg15: memberdenycmd -add: nsslapd-pluginArg16: ipasudorunas -add: nsslapd-pluginArg17: ipasudorunasgroup -add: nsslapd-pluginArg18: ipatokenradiusconfiglink +remove: nsslapd-pluginArg7: manager +remove: nsslapd-pluginArg8: secretary +remove: nsslapd-pluginArg9: memberuser +remove: nsslapd-pluginArg10: memberhost +remove: nsslapd-pluginArg11: sourcehost +remove: nsslapd-pluginArg12: memberservice +remove: nsslapd-pluginArg13: managedby +remove: nsslapd-pluginArg14: memberallowcmd +remove: nsslapd-pluginArg15: memberdenycmd +remove: nsslapd-pluginArg16: ipasudorunas +remove: nsslapd-pluginArg17: ipasudorunasgroup +remove: nsslapd-pluginArg18: ipatokenradiusconfiglink +add: referint-membership-attr: manager +add: referint-membership-attr: secretary +add: referint-membership-attr: memberuser +add: referint-membership-attr: memberhost +add: referint-membership-attr: sourcehost +add: referint-membership-attr: memberservice +add: referint-membership-attr: managedby +add: referint-membership-attr: memberallowcmd +add: referint-membership-attr: memberdenycmd +add: referint-membership-attr: ipasudorunas +add: referint-membership-attr: ipasudorunasgroup +add: referint-membership-attr: ipatokenradiusconfiglink -- cgit