diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2012-03-07 17:59:19 -0500 |
|---|---|---|
| committer | Martin Kosek <mkosek@redhat.com> | 2012-03-13 08:34:07 +0100 |
| commit | f5e5bf8f82ba2051ace5fc5f29d7bf25631e0a2c (patch) | |
| tree | a2d52a1ef96b96a918067c37f60b09262bf38ec2 | |
| parent | 0cb9882be9dc13781fb566df11df8bb962ea1ca9 (diff) | |
| download | freeipa-f5e5bf8f82ba2051ace5fc5f29d7bf25631e0a2c.tar.gz freeipa-f5e5bf8f82ba2051ace5fc5f29d7bf25631e0a2c.tar.xz freeipa-f5e5bf8f82ba2051ace5fc5f29d7bf25631e0a2c.zip | |
Fix nsslapd-anonlimitsdn dn in cn=config
The dn value needs to be quoted otherwise it is interpreted to be a
multi-value.
This will replace whatever value is currently set.
https://fedorahosted.org/freeipa/ticket/2452
| -rw-r--r-- | install/updates/10-config.update | 2 | ||||
| -rw-r--r-- | ipaserver/ipaldap.py | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/install/updates/10-config.update b/install/updates/10-config.update index 420e04880..97fbdef2d 100644 --- a/install/updates/10-config.update +++ b/install/updates/10-config.update @@ -31,7 +31,7 @@ default:nsSizeLimit: 5000 default:nsLookThroughLimit: 5000 dn: cn=config -add:nsslapd-anonlimitsdn:cn=anonymous-limits,cn=etc,$SUFFIX +only:nsslapd-anonlimitsdn:'cn=anonymous-limits,cn=etc,$SUFFIX' # Add a defaultNamingContext if one hasn't already been set. This was # introduced in 389-ds-base-1.2.10-0.9.a8. Adding this to a server that diff --git a/ipaserver/ipaldap.py b/ipaserver/ipaldap.py index 745bb777e..8703b5e4b 100644 --- a/ipaserver/ipaldap.py +++ b/ipaserver/ipaldap.py @@ -540,7 +540,7 @@ class IPAdmin(IPAEntryLDAPObject): # Some attributes, like those in cn=config, need to be replaced # not deleted/added. - FORCE_REPLACE_ON_UPDATE_ATTRS = ('nsslapd-ssl-check-hostname', 'nsslapd-lookthroughlimit', 'nsslapd-idlistscanlimit') + FORCE_REPLACE_ON_UPDATE_ATTRS = ('nsslapd-ssl-check-hostname', 'nsslapd-lookthroughlimit', 'nsslapd-idlistscanlimit', 'nsslapd-anonlimitsdn') modlist = [] old_entry = ipautil.CIDict(old_entry) |