From a4b1bb25c98a6d2b94a89cefa619b75656551b60 Mon Sep 17 00:00:00 2001 From: Martin Basti Date: Mon, 20 Jul 2015 16:36:45 +0200 Subject: Limit max age of replication changelog Limit max age of replication changelog to seven days, instead of grow to unlimited size. https://fedorahosted.org/freeipa/ticket/5086 Reviewed-By: David Kupka --- install/updates/20-replication.update | 4 ++++ ipaserver/install/replication.py | 1 + 2 files changed, 5 insertions(+) diff --git a/install/updates/20-replication.update b/install/updates/20-replication.update index 066b9fcd4..83d5d1f0c 100644 --- a/install/updates/20-replication.update +++ b/install/updates/20-replication.update @@ -27,3 +27,7 @@ default: objectclass: top default: objectclass: iparepltopoconf default: ipaReplTopoConfRoot: $SUFFIX default: cn: realm + +# Set replication changelog limit (#5086) +dn: cn=changelog5,cn=config +addifnew: nsslapd-changelogmaxage: 7d diff --git a/ipaserver/install/replication.py b/ipaserver/install/replication.py index 71b562949..b50dc0584 100644 --- a/ipaserver/install/replication.py +++ b/ipaserver/install/replication.py @@ -468,6 +468,7 @@ class ReplicationManager(object): 'objectclass': ["top", "extensibleobject"], 'cn': ["changelog5"], 'nsslapd-changelogdir': [os.path.join(dbdir, "cldb")], + 'nsslapd-changelogmaxage': ['7d'], } ) try: -- cgit