From 9cdeabc778c3eaf9e62eee4fc047c2fd1ec58260 Mon Sep 17 00:00:00 2001
From: Martin Kosek <mkosek@redhat.com>
Date: Mon, 17 Oct 2011 13:56:21 +0200
Subject: Enable automember for upgraded servers

automember functionality is depends on predefined data is in LDAP.
Since we add it for fresh installs only, automember cannot be used
for upgraded servers. Make sure that automember LDAP data is added
during upgrade too.

https://fedorahosted.org/freeipa/ticket/1992
---
 install/updates/40-automember.update | 22 ++++++++++++++++++++++
 install/updates/Makefile.am          |  1 +
 2 files changed, 23 insertions(+)
 create mode 100644 install/updates/40-automember.update

(limited to 'install')

diff --git a/install/updates/40-automember.update b/install/updates/40-automember.update
new file mode 100644
index 00000000..27aa3028
--- /dev/null
+++ b/install/updates/40-automember.update
@@ -0,0 +1,22 @@
+# Add all supported automember LDAP objects
+dn: cn=Auto Membership Plugin,cn=plugins,cn=config
+addifnew: nsslapd-pluginConfigArea: 'cn=automember,cn=etc,$SUFFIX'
+
+dn: cn=automember,cn=etc,$SUFFIX
+default: objectClass: top
+default: objectClass: nsContainer
+default: cn: automember
+
+dn: cn=Hostgroup,cn=automember,cn=etc,$SUFFIX
+default: objectclass: autoMemberDefinition
+default: cn: Hostgroup
+default: autoMemberScope: cn=computers,cn=accounts,$SUFFIX
+default: autoMemberFilter: objectclass=ipaHost
+default: autoMemberGroupingAttr: member:dn
+
+dn: cn=Group,cn=automember,cn=etc,$SUFFIX
+default: objectclass: autoMemberDefinition
+default: cn: Group
+default: autoMemberScope: cn=users,cn=accounts,$SUFFIX
+default: autoMemberFilter: objectclass=posixAccount
+default: autoMemberGroupingAttr: member:dn
diff --git a/install/updates/Makefile.am b/install/updates/Makefile.am
index 3ecdc827..71d699fd 100644
--- a/install/updates/Makefile.am
+++ b/install/updates/Makefile.am
@@ -20,6 +20,7 @@ app_DATA =				\
 	21-replicas_container.update	\
 	40-delegation.update		\
 	40-dns.update			\
+	40-automember.update		\
 	45-roles.update			\
 	50-lockout-policy.update	\
 	50-groupuuid.update		\
-- 
cgit