summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMartin Basti <mbasti@redhat.com>2015-07-20 16:36:45 +0200
committerMartin Basti <mbasti@redhat.com>2015-09-21 12:04:12 +0200
commita4b1bb25c98a6d2b94a89cefa619b75656551b60 (patch)
tree53667f3fe37a6b8fc07fe8b01b3fac4bcec00f19
parent5137478fb8bba16d9cbecba53983c893dc0884d5 (diff)
downloadfreeipa-a4b1bb25c98a6d2b94a89cefa619b75656551b60.tar.gz
freeipa-a4b1bb25c98a6d2b94a89cefa619b75656551b60.tar.xz
freeipa-a4b1bb25c98a6d2b94a89cefa619b75656551b60.zip
Limit max age of replication changelog
Limit max age of replication changelog to seven days, instead of grow to unlimited size. https://fedorahosted.org/freeipa/ticket/5086 Reviewed-By: David Kupka <dkupka@redhat.com>
-rw-r--r--install/updates/20-replication.update4
-rw-r--r--ipaserver/install/replication.py1
2 files changed, 5 insertions, 0 deletions
diff --git a/install/updates/20-replication.update b/install/updates/20-replication.update
index 066b9fcd4..83d5d1f0c 100644
--- a/install/updates/20-replication.update
+++ b/install/updates/20-replication.update
@@ -27,3 +27,7 @@ default: objectclass: top
default: objectclass: iparepltopoconf
default: ipaReplTopoConfRoot: $SUFFIX
default: cn: realm
+
+# Set replication changelog limit (#5086)
+dn: cn=changelog5,cn=config
+addifnew: nsslapd-changelogmaxage: 7d
diff --git a/ipaserver/install/replication.py b/ipaserver/install/replication.py
index 71b562949..b50dc0584 100644
--- a/ipaserver/install/replication.py
+++ b/ipaserver/install/replication.py
@@ -468,6 +468,7 @@ class ReplicationManager(object):
'objectclass': ["top", "extensibleobject"],
'cn': ["changelog5"],
'nsslapd-changelogdir': [os.path.join(dbdir, "cldb")],
+ 'nsslapd-changelogmaxage': ['7d'],
}
)
try: