|
 |
ac7d03 |
From 08c5150d76971ab17eb02ceef0e65e993b7732ff Mon Sep 17 00:00:00 2001
|
|
|
ac7d03 |
From: Stanislav Laznicka <slaznick@redhat.com>
|
|
|
ac7d03 |
Date: Fri, 21 Apr 2017 09:39:56 +0200
|
|
|
ac7d03 |
Subject: [PATCH] compat: ignore cn=topology,cn=ipa,cn=etc subtree
|
|
|
ac7d03 |
|
|
|
ac7d03 |
The entries in cn=topology,cn=ipa,cn=etc should not be taken in
|
|
|
ac7d03 |
account for the compat plugin.
|
|
|
ac7d03 |
|
|
|
ac7d03 |
https://pagure.io/freeipa/issue/6821
|
|
|
ac7d03 |
|
|
|
ac7d03 |
Reviewed-By: Martin Basti <mbasti@redhat.com>
|
|
|
ac7d03 |
---
|
|
|
ac7d03 |
install/updates/80-schema_compat.update | 5 +++++
|
|
|
ac7d03 |
1 file changed, 5 insertions(+)
|
|
|
ac7d03 |
|
|
|
ac7d03 |
diff --git a/install/updates/80-schema_compat.update b/install/updates/80-schema_compat.update
|
|
|
ac7d03 |
index 06cbcab8ad809d95a907c161044ff91df827ebf3..7483518134aad47195ab136626acb5130c0d536d 100644
|
|
|
ac7d03 |
--- a/install/updates/80-schema_compat.update
|
|
|
ac7d03 |
+++ b/install/updates/80-schema_compat.update
|
|
|
ac7d03 |
@@ -152,6 +152,7 @@ remove: schema-compat-ignore-subtree: o=ipaca
|
|
|
ac7d03 |
add: schema-compat-restrict-subtree: $SUFFIX
|
|
|
ac7d03 |
add: schema-compat-restrict-subtree: cn=Schema Compatibility,cn=plugins,cn=config
|
|
|
ac7d03 |
add: schema-compat-ignore-subtree: cn=dna,cn=ipa,cn=etc,$SUFFIX
|
|
|
ac7d03 |
+add: schema-compat-ignore-subtree: cn=topology,cn=ipa,cn=etc,$SUFFIX
|
|
|
ac7d03 |
|
|
|
ac7d03 |
# Change padding for host and userCategory so the pad returns the same value
|
|
|
ac7d03 |
# as the original, '' or -.
|
|
|
ac7d03 |
@@ -162,6 +163,7 @@ remove: schema-compat-ignore-subtree: o=ipaca
|
|
|
ac7d03 |
add: schema-compat-restrict-subtree: $SUFFIX
|
|
|
ac7d03 |
add: schema-compat-restrict-subtree: cn=Schema Compatibility,cn=plugins,cn=config
|
|
|
ac7d03 |
add: schema-compat-ignore-subtree: cn=dna,cn=ipa,cn=etc,$SUFFIX
|
|
|
ac7d03 |
+add: schema-compat-ignore-subtree: cn=topology,cn=ipa,cn=etc,$SUFFIX
|
|
|
ac7d03 |
|
|
|
ac7d03 |
dn: cn=computers, cn=Schema Compatibility, cn=plugins, cn=config
|
|
|
ac7d03 |
default:objectClass: top
|
|
|
ac7d03 |
@@ -181,6 +183,7 @@ remove: schema-compat-ignore-subtree: o=ipaca
|
|
|
ac7d03 |
add: schema-compat-restrict-subtree: $SUFFIX
|
|
|
ac7d03 |
add: schema-compat-restrict-subtree: cn=Schema Compatibility,cn=plugins,cn=config
|
|
|
ac7d03 |
add: schema-compat-ignore-subtree: cn=dna,cn=ipa,cn=etc,$SUFFIX
|
|
|
ac7d03 |
+add: schema-compat-ignore-subtree: cn=topology,cn=ipa,cn=etc,$SUFFIX
|
|
|
ac7d03 |
|
|
|
ac7d03 |
dn: cn=sudoers,cn=Schema Compatibility,cn=plugins,cn=config
|
|
|
ac7d03 |
add:schema-compat-entry-attribute: sudoOrder=%{sudoOrder}
|
|
|
ac7d03 |
@@ -191,6 +194,7 @@ remove: schema-compat-ignore-subtree: o=ipaca
|
|
|
ac7d03 |
add: schema-compat-restrict-subtree: $SUFFIX
|
|
|
ac7d03 |
add: schema-compat-restrict-subtree: cn=Schema Compatibility,cn=plugins,cn=config
|
|
|
ac7d03 |
add: schema-compat-ignore-subtree: cn=dna,cn=ipa,cn=etc,$SUFFIX
|
|
|
ac7d03 |
+add: schema-compat-ignore-subtree: cn=topology,cn=ipa,cn=etc,$SUFFIX
|
|
|
ac7d03 |
|
|
|
ac7d03 |
dn: cn=groups,cn=Schema Compatibility,cn=plugins,cn=config
|
|
|
ac7d03 |
remove: schema-compat-ignore-subtree: cn=changelog
|
|
|
ac7d03 |
@@ -198,6 +202,7 @@ remove: schema-compat-ignore-subtree: o=ipaca
|
|
|
ac7d03 |
add: schema-compat-restrict-subtree: $SUFFIX
|
|
|
ac7d03 |
add: schema-compat-restrict-subtree: cn=Schema Compatibility,cn=plugins,cn=config
|
|
|
ac7d03 |
add: schema-compat-ignore-subtree: cn=dna,cn=ipa,cn=etc,$SUFFIX
|
|
|
ac7d03 |
+add: schema-compat-ignore-subtree: cn=topology,cn=ipa,cn=etc,$SUFFIX
|
|
|
ac7d03 |
|
|
|
ac7d03 |
dn: cn=Schema Compatibility,cn=plugins,cn=config
|
|
|
ac7d03 |
# We need to run schema-compat pre-bind callback before
|
|
|
ac7d03 |
--
|
|
|
ac7d03 |
2.12.2
|
|
|
ac7d03 |
|