summaryrefslogtreecommitdiffstats
path: root/install/updates
diff options
context:
space:
mode:
authorMartin Basti <mbasti@redhat.com>2016-01-18 17:19:08 +0100
committerMartin Basti <mbasti@redhat.com>2016-01-21 11:28:21 +0100
commit54a91c3ed33c7be54cadb188add802e781893ec9 (patch)
tree7a426bb14ffc7e7b0deee4c1e17405357e1e8c9e /install/updates
parentb808376e2f516297dfb8311e514e31f2933bce01 (diff)
downloadfreeipa-54a91c3ed33c7be54cadb188add802e781893ec9.tar.gz
freeipa-54a91c3ed33c7be54cadb188add802e781893ec9.tar.xz
freeipa-54a91c3ed33c7be54cadb188add802e781893ec9.zip
Exclude o=ipaca subtree from Retro Changelog (syncrepl)
CA and DS have issues with Retro Changelog plugin. CA subtree should be excluded from syncrepl. This should improve speed of CA related operations too. https://fedorahosted.org/freeipa/ticket/5538 Reviewed-By: Christian Heimes <cheimes@redhat.com>
Diffstat (limited to 'install/updates')
-rw-r--r--install/updates/20-syncrepl.update1
1 files changed, 1 insertions, 0 deletions
diff --git a/install/updates/20-syncrepl.update b/install/updates/20-syncrepl.update
index d2937d636..8b02133f5 100644
--- a/install/updates/20-syncrepl.update
+++ b/install/updates/20-syncrepl.update
@@ -4,6 +4,7 @@ only:nsslapd-pluginEnabled: on
# Remember original nsuniqueid for objects referenced from cn=changelog
add:nsslapd-attribute: nsuniqueid:targetUniqueId
add:nsslapd-changelogmaxage: 2d
+add:nsslapd-exclude-suffix: o=ipaca
# Keep memberOf and referential integrity plugins away from cn=changelog.
# It is necessary for performance reasons because we don't have appropriate