mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-26 17:01:14 -06:00
e1bbd90360
Topology plugin may merge (aka DEL) segments that would trigger internal search for groups owning that segment. The problem is that it is searching those groups into the full suffix and so need the schema compat map lock. If any other operation holding schema compat map lock need to access the page involved in the DEL, there is a deadlock. This fix is to prevent useless group searching if the target entry is a segment or is in compat tree. https://fedorahosted.org/freeipa/ticket/5637 Reviewed-By: Martin Basti <mbasti@redhat.com>
30 lines
1.2 KiB
Plaintext
30 lines
1.2 KiB
Plaintext
# Enable Retro changelog - it is necessary for SyncRepl
|
|
dn: cn=Retro Changelog Plugin,cn=plugins,cn=config
|
|
only:nsslapd-pluginEnabled: on
|
|
# Remember original nsuniqueid for objects referenced from cn=changelog
|
|
add:nsslapd-attribute: nsuniqueid:targetUniqueId
|
|
add:nsslapd-changelogmaxage: 2d
|
|
add:nsslapd-exclude-suffix: o=ipaca
|
|
|
|
# Keep memberOf and referential integrity plugins away from cn=changelog.
|
|
# It is necessary for performance reasons because we don't have appropriate
|
|
# indices for cn=changelog.
|
|
dn: cn=MemberOf Plugin,cn=plugins,cn=config
|
|
add:memberofentryscope: $SUFFIX
|
|
add:memberofentryscopeexcludesubtree: cn=compat,$SUFFIX
|
|
add:memberofentryscopeexcludesubtree: cn=provisioning,$SUFFIX
|
|
add:memberofentryscopeexcludesubtree: cn=topology,cn=ipa,cn=etc,$SUFFIX
|
|
|
|
dn: cn=referential integrity postoperation,cn=plugins,cn=config
|
|
add:nsslapd-plugincontainerscope: $SUFFIX
|
|
add:nsslapd-pluginentryscope: $SUFFIX
|
|
add:nsslapd-pluginExcludeEntryScope: cn=provisioning,$SUFFIX
|
|
|
|
# Enable SyncRepl
|
|
dn: cn=Content Synchronization,cn=plugins,cn=config
|
|
only:nsslapd-pluginEnabled: on
|
|
|
|
# Make sure IPA UUID does not generate ipaUniqueID for Stage/Delete entries
|
|
dn: cn=IPA Unique IDs,cn=IPA UUID,cn=plugins,cn=config
|
|
add:ipaUuidExcludeSubtree: cn=provisioning,$SUFFIX
|