From c9c55a2845fd8471bc609a23f5a32d252f7df04c Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Mon, 17 Sep 2012 17:45:42 +0200 Subject: Run the CLEANALLRUV task when deleting a replication agreement. This adds two new commands to ipa-replica-manage: list-ruv & clean-ruv list-ruv can be use to list the update vectors the master has configugured clean-ruv can be used to fire off the CLEANRUV task to remove a replication vector. It should be used with caution. https://fedorahosted.org/freeipa/ticket/2303 --- install/share/replica-acis.ldif | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'install/share/replica-acis.ldif') diff --git a/install/share/replica-acis.ldif b/install/share/replica-acis.ldif index baa621616..65dfb7a66 100644 --- a/install/share/replica-acis.ldif +++ b/install/share/replica-acis.ldif @@ -20,6 +20,11 @@ changetype: modify add: aci aci: (targetattr=*)(targetfilter="(|(objectclass=nsds5replicationagreement)(objectclass=nsDSWindowsReplicationAgreement))")(version 3.0;acl "permission:Remove Replication Agreements";allow (delete) groupdn = "ldap:///cn=Remove Replication Agreements,cn=permissions,cn=pbac,$SUFFIX";) +dn: cn=userRoot,cn=ldbm database,cn=plugins,cn=config +changetype: modify +add: aci +aci: (targetattr=nsslapd-readonly)(version 3.0; acl "Allow marking the database readonly"; allow (write) groupdn = "ldap:///cn=Remove Replication Agreements,cn=permissions,cn=pbac,$SUFFIX";) + dn: cn=tasks,cn=config changetype: modify add: aci -- cgit