freeipa/ipaserver/install
Martin Kosek 917a480675 Add safe updates for objectClasses
Current objectclass updates in a form of "replace" update instruction
dependent on exact match of the old object class specification in the
update instruction and the real value in LDAP. However, this approach is
very error prone as object class definition can easily differ as for
example because of unexpected X-ORIGIN value. Such objectclass update
failures may lead to serious malfunctions later.

When comparing the objectclasses, make sure we normalize them both
before we compare them to mitigate these kinds of errors. python-ldap's
objectclass model can be utilized to do the normalization part.

One objectclass update instruction was changed to do a replace of
an objectclass separately from add update instruction so that we
really only replace what's stored in LDAP.

https://fedorahosted.org/freeipa/ticket/2440
2012-09-04 22:45:27 -04:00
..
plugins Add nsds5ReplicaStripAttrs to replica agreements 2012-09-04 05:30:57 -04:00
__init__.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
adtrustinstance.py Use DN objects instead of strings 2012-08-12 16:23:24 -04:00
bindinstance.py Internationalization for public errors 2012-09-03 18:16:12 +02:00
cainstance.py Use DN objects instead of strings 2012-08-12 16:23:24 -04:00
certs.py Internationalization for public errors 2012-09-03 18:16:12 +02:00
dsinstance.py Fix winsync agreements creation 2012-08-12 23:26:16 -04:00
httpinstance.py Use DN objects instead of strings 2012-08-12 16:23:24 -04:00
installutils.py Use DN objects instead of strings 2012-08-12 16:23:24 -04:00
ipa_ldap_updater.py Use DN objects instead of strings 2012-08-12 16:23:24 -04:00
krbinstance.py Use DN objects instead of strings 2012-08-12 16:23:24 -04:00
ldapupdate.py Add safe updates for objectClasses 2012-09-04 22:45:27 -04:00
Makefile.am Add ipa-adtrust-install utility 2011-09-14 18:45:13 -04:00
memcacheinstance.py Add ipa_memcached service 2012-02-09 13:20:28 -06:00
ntpinstance.py ticket 2022 - modify codebase to utilize IPALogManager, obsoletes logging 2011-11-23 09:36:18 +01:00
replication.py Add nsds5ReplicaStripAttrs to replica agreements 2012-09-04 05:30:57 -04:00
service.py Use DN objects instead of strings 2012-08-12 16:23:24 -04:00
sysupgrade.py Add sysupgrade state file 2012-06-10 21:23:10 -04:00
upgradeinstance.py Centralize timeout for waiting for servers to start. 2012-07-02 17:08:58 -04:00