ac7d03
From 08c5150d76971ab17eb02ceef0e65e993b7732ff Mon Sep 17 00:00:00 2001
ac7d03
From: Stanislav Laznicka <slaznick@redhat.com>
ac7d03
Date: Fri, 21 Apr 2017 09:39:56 +0200
ac7d03
Subject: [PATCH] compat: ignore cn=topology,cn=ipa,cn=etc subtree
ac7d03
ac7d03
The entries in cn=topology,cn=ipa,cn=etc should not be taken in
ac7d03
account for the compat plugin.
ac7d03
ac7d03
https://pagure.io/freeipa/issue/6821
ac7d03
ac7d03
Reviewed-By: Martin Basti <mbasti@redhat.com>
ac7d03
---
ac7d03
 install/updates/80-schema_compat.update | 5 +++++
ac7d03
 1 file changed, 5 insertions(+)
ac7d03
ac7d03
diff --git a/install/updates/80-schema_compat.update b/install/updates/80-schema_compat.update
ac7d03
index 06cbcab8ad809d95a907c161044ff91df827ebf3..7483518134aad47195ab136626acb5130c0d536d 100644
ac7d03
--- a/install/updates/80-schema_compat.update
ac7d03
+++ b/install/updates/80-schema_compat.update
ac7d03
@@ -152,6 +152,7 @@ remove: schema-compat-ignore-subtree: o=ipaca
ac7d03
 add: schema-compat-restrict-subtree: $SUFFIX
ac7d03
 add: schema-compat-restrict-subtree: cn=Schema Compatibility,cn=plugins,cn=config
ac7d03
 add: schema-compat-ignore-subtree: cn=dna,cn=ipa,cn=etc,$SUFFIX
ac7d03
+add: schema-compat-ignore-subtree: cn=topology,cn=ipa,cn=etc,$SUFFIX
ac7d03
 
ac7d03
 # Change padding for host and userCategory so the pad returns the same value
ac7d03
 # as the original, '' or -.
ac7d03
@@ -162,6 +163,7 @@ remove: schema-compat-ignore-subtree: o=ipaca
ac7d03
 add: schema-compat-restrict-subtree: $SUFFIX
ac7d03
 add: schema-compat-restrict-subtree: cn=Schema Compatibility,cn=plugins,cn=config
ac7d03
 add: schema-compat-ignore-subtree: cn=dna,cn=ipa,cn=etc,$SUFFIX
ac7d03
+add: schema-compat-ignore-subtree: cn=topology,cn=ipa,cn=etc,$SUFFIX
ac7d03
 
ac7d03
 dn: cn=computers, cn=Schema Compatibility, cn=plugins, cn=config
ac7d03
 default:objectClass: top
ac7d03
@@ -181,6 +183,7 @@ remove: schema-compat-ignore-subtree: o=ipaca
ac7d03
 add: schema-compat-restrict-subtree: $SUFFIX
ac7d03
 add: schema-compat-restrict-subtree: cn=Schema Compatibility,cn=plugins,cn=config
ac7d03
 add: schema-compat-ignore-subtree: cn=dna,cn=ipa,cn=etc,$SUFFIX
ac7d03
+add: schema-compat-ignore-subtree: cn=topology,cn=ipa,cn=etc,$SUFFIX
ac7d03
 
ac7d03
 dn: cn=sudoers,cn=Schema Compatibility,cn=plugins,cn=config
ac7d03
 add:schema-compat-entry-attribute: sudoOrder=%{sudoOrder}
ac7d03
@@ -191,6 +194,7 @@ remove: schema-compat-ignore-subtree: o=ipaca
ac7d03
 add: schema-compat-restrict-subtree: $SUFFIX
ac7d03
 add: schema-compat-restrict-subtree: cn=Schema Compatibility,cn=plugins,cn=config
ac7d03
 add: schema-compat-ignore-subtree: cn=dna,cn=ipa,cn=etc,$SUFFIX
ac7d03
+add: schema-compat-ignore-subtree: cn=topology,cn=ipa,cn=etc,$SUFFIX
ac7d03
 
ac7d03
 dn: cn=groups,cn=Schema Compatibility,cn=plugins,cn=config
ac7d03
 remove: schema-compat-ignore-subtree: cn=changelog
ac7d03
@@ -198,6 +202,7 @@ remove: schema-compat-ignore-subtree: o=ipaca
ac7d03
 add: schema-compat-restrict-subtree: $SUFFIX
ac7d03
 add: schema-compat-restrict-subtree: cn=Schema Compatibility,cn=plugins,cn=config
ac7d03
 add: schema-compat-ignore-subtree: cn=dna,cn=ipa,cn=etc,$SUFFIX
ac7d03
+add: schema-compat-ignore-subtree: cn=topology,cn=ipa,cn=etc,$SUFFIX
ac7d03
 
ac7d03
 dn: cn=Schema Compatibility,cn=plugins,cn=config
ac7d03
 # We need to run schema-compat pre-bind callback before
ac7d03
-- 
ac7d03
2.12.2
ac7d03