mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2026-10-25 22:50:12 -05:00
The lmdb performance for VLV indexes is not great so the PKI team recommended we switch from sequential serial numbers to Random Serial Numbers (RSN). The first time a non-bdb backend (future-proofing) is installed then the replication RSN configuration value is stored. All future replica installs will use RSN. We have no way of enforcing ONLY to have RSN across a topology so it will be up to administrators to retire any sequential CAs. Fixes: https://pagure.io/freeipa/issue/9661 Signed-off-by: Rob Crittenden <rcritten@redhat.com> Reviewed-By: Florence Blanc-Renaud <flo@redhat.com> Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com> Reviewed-By: Rafael Guterres Jeffman <rjeffman@redhat.com>