summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMartin Kosek <mkosek@redhat.com>2013-10-04 13:48:52 +0200
committerPetr Viktorin <pviktori@redhat.com>2013-10-04 14:30:13 +0200
commitb1451373c4f918621ce06d8144aaa63e1417777c (patch)
tree9e3a14ca27dcf691544f8ae8f1d37ca4fc5e1940
parent3a4a7458c72bb70673520a546ba463ec7fc94bcf (diff)
downloadfreeipa-b1451373c4f918621ce06d8144aaa63e1417777c.tar.gz
freeipa-b1451373c4f918621ce06d8144aaa63e1417777c.tar.xz
freeipa-b1451373c4f918621ce06d8144aaa63e1417777c.zip
Remove faulty DNS memberOf Task
This task was added with a DN colliding with privilege update memberOf task being run later and caused this task to be ineffective and thus miss some privilege membership, like "SELinux User Map Administrators" DNS update plugin do not need to run any task at all as privileges will be updated later in scope of 55-pbacmemberof.update https://fedorahosted.org/freeipa/ticket/3877
-rw-r--r--install/updates/40-dns.update11
1 files changed, 2 insertions, 9 deletions
diff --git a/install/updates/40-dns.update b/install/updates/40-dns.update
index 7ad366e60..475a0c05c 100644
--- a/install/updates/40-dns.update
+++ b/install/updates/40-dns.update
@@ -1,5 +1,6 @@
# Add missing member values to attach permissions to their respective
-# privileges and run a memberOf task.
+# privileges
+# Memberof task is already being run in 55-pbacmemberof.update
dn: cn=add dns entries,cn=permissions,cn=pbac,$SUFFIX
addifexist:objectclass: ipapermission
addifexist:member: 'cn=DNS Administrators,cn=privileges,cn=pbac,$SUFFIX'
@@ -18,14 +19,6 @@ addifexist:member: 'cn=DNS Servers,cn=privileges,cn=pbac,$SUFFIX'
dn: cn=Write DNS Configuration,cn=permissions,cn=pbac,$SUFFIX
addifexist:objectclass: ipapermission
-dn: cn=Update PBAC memberOf $TIME, cn=memberof task, cn=tasks, cn=config
-add: objectClass: top
-add: objectClass: extensibleObject
-add: cn: IPA PBAC memberOf $TIME
-add: basedn: 'cn=privileges,cn=pbac,$SUFFIX'
-add: filter: (objectclass=*)
-add: ttl: 10
-
# update DNS container
dn: cn=dns, $SUFFIX
addifexist: objectClass: idnsConfigObject