summaryrefslogtreecommitdiffstats
path: root/install
diff options
context:
space:
mode:
authorRob Crittenden <rcritten@redhat.com>2012-10-10 22:41:02 -0400
committerRob Crittenden <rcritten@redhat.com>2012-10-10 20:24:36 -0400
commit9a305c55e74241b8708c18ab5c5a7865ae9819c4 (patch)
treeb027a1de72a29f5f781dec1714aae63bb4b43274 /install
parented3746e9aab6496c9684432f199c0caa7bafb4b5 (diff)
downloadfreeipa.git-9a305c55e74241b8708c18ab5c5a7865ae9819c4.tar.gz
freeipa.git-9a305c55e74241b8708c18ab5c5a7865ae9819c4.tar.xz
freeipa.git-9a305c55e74241b8708c18ab5c5a7865ae9819c4.zip
Explicitly disable betxn plugins for the time being.
This should work with 389-ds-base 1.2.x and 1.3.0. Without other plugin changes 389-ds-base can deadlock. https://fedorahosted.org/freeipa/ticket/3046
Diffstat (limited to 'install')
-rw-r--r--install/share/Makefile.am1
-rw-r--r--install/share/disable-betxn.ldif61
-rw-r--r--install/updates/10-disable-betxn.update37
-rw-r--r--install/updates/Makefile.am1
4 files changed, 100 insertions, 0 deletions
diff --git a/install/share/Makefile.am b/install/share/Makefile.am
index 23cd766a..7f953bc4 100644
--- a/install/share/Makefile.am
+++ b/install/share/Makefile.am
@@ -18,6 +18,7 @@ app_DATA = \
default-hbac.ldif \
default-smb-group.ldif \
delegation.ldif \
+ disable-betxn.ldif \
replica-acis.ldif \
ds-nfiles.ldif \
dns.ldif \
diff --git a/install/share/disable-betxn.ldif b/install/share/disable-betxn.ldif
new file mode 100644
index 00000000..57a6858d
--- /dev/null
+++ b/install/share/disable-betxn.ldif
@@ -0,0 +1,61 @@
+# Disable transactions in 389-ds-base
+
+dn: cn=7-bit check,cn=plugins,cn=config
+changetype: modify
+replace: nsslapd-pluginType
+nsslapd-pluginType: preoperation
+
+dn: cn=attribute uniqueness,cn=plugins,cn=config
+changetype: modify
+replace: nsslapd-pluginType
+nsslapd-pluginType: preoperation
+
+dn: cn=Auto Membership Plugin,cn=plugins,cn=config
+changetype: modify
+replace: nsslapd-pluginType
+nsslapd-pluginType: preoperation
+
+dn: cn=Linked Attributes,cn=plugins,cn=config
+changetype: modify
+replace: nsslapd-pluginType
+nsslapd-pluginType: preoperation
+
+dn: cn=Managed Entries,cn=plugins,cn=config
+changetype: modify
+replace: nsslapd-pluginType
+nsslapd-pluginType: preoperation
+
+dn: cn=MemberOf Plugin,cn=plugins,cn=config
+changetype: modify
+replace: nsslapd-pluginType
+nsslapd-pluginType: postoperation
+
+dn: cn=Multimaster Replication Plugin,cn=plugins,cn=config
+changetype: modify
+replace: nsslapd-pluginbetxn
+nsslapd-pluginbetxn: off
+
+dn: cn=PAM Pass Through Auth,cn=plugins,cn=config
+changetype: modify
+replace: nsslapd-pluginType
+nsslapd-pluginType: preoperation
+
+dn: cn=referential integrity postoperation,cn=plugins,cn=config
+changetype: modify
+replace: nsslapd-pluginType
+nsslapd-pluginType: postoperation
+
+dn: cn=Roles Plugin,cn=plugins,cn=config
+changetype: modify
+replace: nsslapd-pluginbetxn
+nsslapd-pluginbetxn: off
+
+dn: cn=State Change Plugin,cn=plugins,cn=config
+changetype: modify
+replace: nsslapd-pluginType
+nsslapd-pluginType: postoperation
+
+dn: cn=USN,cn=plugins,cn=config
+changetype: modify
+replace: nsslapd-pluginbetxn
+nsslapd-pluginbetxn: off
diff --git a/install/updates/10-disable-betxn.update b/install/updates/10-disable-betxn.update
new file mode 100644
index 00000000..8fca4a5e
--- /dev/null
+++ b/install/updates/10-disable-betxn.update
@@ -0,0 +1,37 @@
+# Disable transactions in 389-ds-base
+
+dn: cn=7-bit check,cn=plugins,cn=config
+only: nsslapd-pluginType: preoperation
+
+dn: cn=attribute uniqueness,cn=plugins,cn=config
+only: nsslapd-pluginType: preoperation
+
+dn: cn=Auto Membership Plugin,cn=plugins,cn=config
+only: nsslapd-pluginType: preoperation
+
+dn: cn=Linked Attributes,cn=plugins,cn=config
+only: nsslapd-pluginType: preoperation
+
+dn: cn=Managed Entries,cn=plugins,cn=config
+only: nsslapd-pluginType: preoperation
+
+dn: cn=MemberOf Plugin,cn=plugins,cn=config
+only: nsslapd-pluginType: postoperation
+
+dn: cn=Multimaster Replication Plugin,cn=plugins,cn=config
+only: nsslapd-pluginbetxn: off
+
+dn: cn=PAM Pass Through Auth,cn=plugins,cn=config
+only: nsslapd-pluginType: preoperation
+
+dn: cn=referential integrity postoperation,cn=plugins,cn=config
+only: nsslapd-pluginType: postoperation
+
+dn: cn=Roles Plugin,cn=plugins,cn=config
+only: nsslapd-pluginbetxn: off
+
+dn: cn=State Change Plugin,cn=plugins,cn=config
+only: nsslapd-pluginType: postoperation
+
+dn: cn=USN,cn=plugins,cn=config
+only: nsslapd-pluginbetxn: off
diff --git a/install/updates/Makefile.am b/install/updates/Makefile.am
index 8f60bc18..a675af8b 100644
--- a/install/updates/Makefile.am
+++ b/install/updates/Makefile.am
@@ -7,6 +7,7 @@ app_DATA = \
10-RFC2307bis.update \
10-RFC4876.update \
10-config.update \
+ 10-disable-betxn.update \
10-selinuxusermap.update \
10-sudo.update \
10-ssh.update \