From 990553221fa53c7a294a80c07b8c89118ef6b3be Mon Sep 17 00:00:00 2001 From: Martin Kosek Date: Mon, 17 Oct 2011 13:56:21 +0200 Subject: Enable automember for upgraded servers automember functionality is depends on predefined data is in LDAP. Since we add it for fresh installs only, automember cannot be used for upgraded servers. Make sure that automember LDAP data is added during upgrade too. https://fedorahosted.org/freeipa/ticket/1992 --- install/updates/40-automember.update | 22 ++++++++++++++++++++++ install/updates/Makefile.am | 1 + 2 files changed, 23 insertions(+) create mode 100644 install/updates/40-automember.update diff --git a/install/updates/40-automember.update b/install/updates/40-automember.update new file mode 100644 index 000000000..27aa3028e --- /dev/null +++ b/install/updates/40-automember.update @@ -0,0 +1,22 @@ +# Add all supported automember LDAP objects +dn: cn=Auto Membership Plugin,cn=plugins,cn=config +addifnew: nsslapd-pluginConfigArea: 'cn=automember,cn=etc,$SUFFIX' + +dn: cn=automember,cn=etc,$SUFFIX +default: objectClass: top +default: objectClass: nsContainer +default: cn: automember + +dn: cn=Hostgroup,cn=automember,cn=etc,$SUFFIX +default: objectclass: autoMemberDefinition +default: cn: Hostgroup +default: autoMemberScope: cn=computers,cn=accounts,$SUFFIX +default: autoMemberFilter: objectclass=ipaHost +default: autoMemberGroupingAttr: member:dn + +dn: cn=Group,cn=automember,cn=etc,$SUFFIX +default: objectclass: autoMemberDefinition +default: cn: Group +default: autoMemberScope: cn=users,cn=accounts,$SUFFIX +default: autoMemberFilter: objectclass=posixAccount +default: autoMemberGroupingAttr: member:dn diff --git a/install/updates/Makefile.am b/install/updates/Makefile.am index 3ecdc8276..71d699fd5 100644 --- a/install/updates/Makefile.am +++ b/install/updates/Makefile.am @@ -20,6 +20,7 @@ app_DATA = \ 21-replicas_container.update \ 40-delegation.update \ 40-dns.update \ + 40-automember.update \ 45-roles.update \ 50-lockout-policy.update \ 50-groupuuid.update \ -- cgit