summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--install/updates/10-config.update2
-rw-r--r--ipaserver/ipaldap.py2
2 files changed, 2 insertions, 2 deletions
diff --git a/install/updates/10-config.update b/install/updates/10-config.update
index 420e0488..97fbdef2 100644
--- a/install/updates/10-config.update
+++ b/install/updates/10-config.update
@@ -31,7 +31,7 @@ default:nsSizeLimit: 5000
default:nsLookThroughLimit: 5000
dn: cn=config
-add:nsslapd-anonlimitsdn:cn=anonymous-limits,cn=etc,$SUFFIX
+only:nsslapd-anonlimitsdn:'cn=anonymous-limits,cn=etc,$SUFFIX'
# Add a defaultNamingContext if one hasn't already been set. This was
# introduced in 389-ds-base-1.2.10-0.9.a8. Adding this to a server that
diff --git a/ipaserver/ipaldap.py b/ipaserver/ipaldap.py
index 745bb777..8703b5e4 100644
--- a/ipaserver/ipaldap.py
+++ b/ipaserver/ipaldap.py
@@ -540,7 +540,7 @@ class IPAdmin(IPAEntryLDAPObject):
# Some attributes, like those in cn=config, need to be replaced
# not deleted/added.
- FORCE_REPLACE_ON_UPDATE_ATTRS = ('nsslapd-ssl-check-hostname', 'nsslapd-lookthroughlimit', 'nsslapd-idlistscanlimit')
+ FORCE_REPLACE_ON_UPDATE_ATTRS = ('nsslapd-ssl-check-hostname', 'nsslapd-lookthroughlimit', 'nsslapd-idlistscanlimit', 'nsslapd-anonlimitsdn')
modlist = []
old_entry = ipautil.CIDict(old_entry)