diff options
| author | Martin Babinsky <mbabinsk@redhat.com> | 2016-11-23 16:58:39 +0100 |
|---|---|---|
| committer | Martin Basti <mbasti@redhat.com> | 2016-11-29 16:09:59 +0100 |
| commit | 266b9d9c6c9b9dec10b8a70382445fa2f800dd69 (patch) | |
| tree | 2b2a5aeaf6908afb9e9de57a6b96158de4ee1234 | |
| parent | 73d0d03891c8585a925f5b49739990c579999f6e (diff) | |
| download | freeipa-266b9d9c6c9b9dec10b8a70382445fa2f800dd69.tar.gz freeipa-266b9d9c6c9b9dec10b8a70382445fa2f800dd69.tar.xz freeipa-266b9d9c6c9b9dec10b8a70382445fa2f800dd69.zip | |
replication: ensure bind DN group check interval is set on replica config
This is a safeguard ensuring valid replica configuration against incorrectly
upgraded masters lacking 'nsds5replicabinddngroupcheckinterval' attribute on
their domain/ca topology config.
https://fedorahosted.org/freeipa/ticket/6508
Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
| -rw-r--r-- | ipaserver/install/replication.py | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/ipaserver/install/replication.py b/ipaserver/install/replication.py index 430a0468a..3f909bbf0 100644 --- a/ipaserver/install/replication.py +++ b/ipaserver/install/replication.py @@ -456,6 +456,12 @@ class ReplicationManager(object): if self.repl_man_group_dn not in binddn_groups: mod.append((ldap.MOD_ADD, 'nsds5replicabinddngroup', self.repl_man_group_dn)) + + if 'nsds5replicabinddngroupcheckinterval' not in entry: + mod.append( + (ldap.MOD_ADD, + 'nsds5replicabinddngroupcheckinterval', + '60')) if mod: conn.modify_s(dn, mod) |