Update referential integrity config for DS 1.3.3

Hisorically DS provided defaults for the referential
integrity plugin in nsslapd-pluginArg*:

    nsslapd-pluginarg3: member
    nsslapd-pluginarg4: uniquemember
    nsslapd-pluginarg5: owner
    nsslapd-pluginarg6: seeAlso

In 389-ds 1.3.3, the multi-valued referint-membership-attr
is used instead.

The old way still works, but it requires that the values
are numbered consecutively, so IPA's defaults that started
with 7 were not taken into account.

Convert IPA defaults to use referint-membership-attr.

https://fedorahosted.org/freeipa/ticket/4537

Reviewed-By: Martin Kosek <mkosek@redhat.com>
This commit is contained in:
Petr Viktorin
2014-09-12 17:14:14 +02:00
committed by Martin Kosek
parent ab196220fd
commit d61fb40542
2 changed files with 24 additions and 43 deletions

View File

@@ -2,36 +2,3 @@ dn: cn=referential integrity postoperation,cn=plugins,cn=config
changetype: modify
replace: nsslapd-pluginenabled
nsslapd-pluginenabled: on
-
add: nsslapd-pluginArg7
nsslapd-pluginArg7: manager
-
add: nsslapd-pluginArg8
nsslapd-pluginArg8: secretary
-
add: nsslapd-pluginArg9
nsslapd-pluginArg9: memberuser
-
add: nsslapd-pluginArg10
nsslapd-pluginArg10: memberhost
-
add: nsslapd-pluginArg11
nsslapd-pluginArg11: sourcehost
-
add: nsslapd-pluginArg12
nsslapd-pluginArg12: memberservice
-
add: nsslapd-pluginArg13
nsslapd-pluginArg13: managedby
-
add: nsslapd-pluginArg14
nsslapd-pluginArg14: memberallowcmd
-
add: nsslapd-pluginArg15
nsslapd-pluginArg15: memberdenycmd
-
add: nsslapd-pluginArg16
nsslapd-pluginArg16: ipasudorunas
-
add: nsslapd-pluginArg17
nsslapd-pluginArg17: ipasudorunasgroup

View File

@@ -2,13 +2,27 @@
# pres and eq indexes defined in 20-indices.update must be set for all these
# attributes
dn: cn=referential integrity postoperation,cn=plugins,cn=config
add: nsslapd-pluginArg9: memberuser
add: nsslapd-pluginArg10: memberhost
add: nsslapd-pluginArg11: sourcehost
add: nsslapd-pluginArg12: memberservice
add: nsslapd-pluginArg13: managedby
add: nsslapd-pluginArg14: memberallowcmd
add: nsslapd-pluginArg15: memberdenycmd
add: nsslapd-pluginArg16: ipasudorunas
add: nsslapd-pluginArg17: ipasudorunasgroup
add: nsslapd-pluginArg18: ipatokenradiusconfiglink
remove: nsslapd-pluginArg7: manager
remove: nsslapd-pluginArg8: secretary
remove: nsslapd-pluginArg9: memberuser
remove: nsslapd-pluginArg10: memberhost
remove: nsslapd-pluginArg11: sourcehost
remove: nsslapd-pluginArg12: memberservice
remove: nsslapd-pluginArg13: managedby
remove: nsslapd-pluginArg14: memberallowcmd
remove: nsslapd-pluginArg15: memberdenycmd
remove: nsslapd-pluginArg16: ipasudorunas
remove: nsslapd-pluginArg17: ipasudorunasgroup
remove: nsslapd-pluginArg18: ipatokenradiusconfiglink
add: referint-membership-attr: manager
add: referint-membership-attr: secretary
add: referint-membership-attr: memberuser
add: referint-membership-attr: memberhost
add: referint-membership-attr: sourcehost
add: referint-membership-attr: memberservice
add: referint-membership-attr: managedby
add: referint-membership-attr: memberallowcmd
add: referint-membership-attr: memberdenycmd
add: referint-membership-attr: ipasudorunas
add: referint-membership-attr: ipasudorunasgroup
add: referint-membership-attr: ipatokenradiusconfiglink