mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-02-25 18:55:28 -06:00
f8771db202
Hisorically DS provided defaults for the referential
integrity plugin in nsslapd-pluginArg*:
nsslapd-pluginarg3: member
nsslapd-pluginarg4: uniquemember
nsslapd-pluginarg5: owner
nsslapd-pluginarg6: seeAlso
In 389-ds 1.3.3, the multi-valued referint-membership-attr
is used instead.
The old way still works, but it requires that the values
are numbered consecutively, so IPA's defaults that started
with 7 were not taken into account.
Convert IPA defaults to use referint-membership-attr.
https://fedorahosted.org/freeipa/ticket/4537
Reviewed-By: Martin Kosek <mkosek@redhat.com>
29 lines
1.2 KiB
Plaintext
29 lines
1.2 KiB
Plaintext
# Expand attributes checked by Referential Integrity plugin
|
|
# pres and eq indexes defined in 20-indices.update must be set for all these
|
|
# attributes
|
|
dn: cn=referential integrity postoperation,cn=plugins,cn=config
|
|
remove: nsslapd-pluginArg7: manager
|
|
remove: nsslapd-pluginArg8: secretary
|
|
remove: nsslapd-pluginArg9: memberuser
|
|
remove: nsslapd-pluginArg10: memberhost
|
|
remove: nsslapd-pluginArg11: sourcehost
|
|
remove: nsslapd-pluginArg12: memberservice
|
|
remove: nsslapd-pluginArg13: managedby
|
|
remove: nsslapd-pluginArg14: memberallowcmd
|
|
remove: nsslapd-pluginArg15: memberdenycmd
|
|
remove: nsslapd-pluginArg16: ipasudorunas
|
|
remove: nsslapd-pluginArg17: ipasudorunasgroup
|
|
remove: nsslapd-pluginArg18: ipatokenradiusconfiglink
|
|
add: referint-membership-attr: manager
|
|
add: referint-membership-attr: secretary
|
|
add: referint-membership-attr: memberuser
|
|
add: referint-membership-attr: memberhost
|
|
add: referint-membership-attr: sourcehost
|
|
add: referint-membership-attr: memberservice
|
|
add: referint-membership-attr: managedby
|
|
add: referint-membership-attr: memberallowcmd
|
|
add: referint-membership-attr: memberdenycmd
|
|
add: referint-membership-attr: ipasudorunas
|
|
add: referint-membership-attr: ipasudorunasgroup
|
|
add: referint-membership-attr: ipatokenradiusconfiglink
|