freeipa.git/daemons/ipa-slapi-plugins/topology, branch kdc-fixes

allow deletion of segment if endpoint is not managed

2015-07-02T09:54:01+00:00

in the preop check do not reject the deletion of a segment, if not both endpoints
are managed servers for the suffix

thisis part of work for ticlet #5072

Reviewed-By: Simo Sorce

v2 improve processing of invalid data.

2015-07-01T10:29:24+00:00

    reject attempts to add segments to suffixes, which do not exist or are not configured.
    check completenes and validity of segment attributes

    cf ticket 5088: https://fedorahosted.org/freeipa/ticket/5088

Reviewed-By: Thierry Bordaz

v2 clear start attr from segment after initialization

2015-06-30T10:47:50+00:00

    Online initialization can be triggered by setting "nsds5BeginReplicaRefresh[;left|;right]": start to a
    segment. But this field remained in the segment and after restart the init would be executed again.
    see Ticket #5065

    To fix this the field is cleared:
    - after a backend comes back online after being initialized
    - since there is a delay and the sending server could be restarted in between,
        the field is also scheced and renḿoved at startup

Reviewed-By: Thierry Bordaz

fix coverity issues

2015-06-29T15:17:29+00:00

Reviewed-By: Martin Basti

correct management of one directional segments

2015-06-29T11:52:34+00:00

    this patch contains the following improvements:
    check for existing segments works for all combinations of one directional and bidirectional segments
    rdns of replication agreements generated from one directional segments are preserves after
        merging of segments, so that deletion of the segment deletes the corresponding replication
        agreements

Reviewed-By: Thierry Bordaz

v2-reject modifications of endpoints and connectivity of a segment

2015-06-11T11:58:02+00:00

Reviewed-By: Thierry Bordaz

make sure the agremment rdn match the rdn used in the segment

2015-06-11T11:58:02+00:00

Reviewed-By: Thierry Bordaz

move replications managers group to cn=sysaccounts,cn=etc,$SUFFIX

2015-06-11T10:10:40+00:00

https://fedorahosted.org/freeipa/ticket/4302

Reviewed-By: Martin Babinsky

check for existing and self referential segments

2015-06-10T12:32:26+00:00

Reviewed-By: Petr Vobornik 
Reviewed-By: Simo Sorce

crash when removing a replica

2015-06-04T09:42:44+00:00

when a server is removed from the topology the plugin tries to remove the
credentials from the replica and the bind dn group.
It performs an internal search for the ldap principal, but can fail if it was already removed
Due to an unitialized variable in this case it can eitehr crash or erroneously remove all
principals.

Reviewed-By: Fraser Tweedale 
Reviewed-By: Petr Vobornik