[Freeipa-devel] [PATCH] Integrate the DNS LDAP back-end

Martin Nagy mnagy at redhat.com
Tue May 12 21:32:22 UTC 2009


Hi,
this patch series will integrate the LDAP driver into the FreeIPA
install script (better late than never..). To get the driver code:

git clone git://github.com/mnagy/bind-dyndb-ldap.git

There's a README file with instructions for building and installing.
The plug-in is available in F-11, but since getting updates there is
pretty hard, you'll be better off with the git tree and make install, I
won't be updating the package in F-11 very often, at least not for now.
Unfortunately, I found a bug when testing the driver with IPA that
will cause any read queries to be denied. I'll try to fix that as soon
as possible.

You will also need the latest bind package either from the F-11 or
devel branch (at least version 9.6.1-0.3.b1). Or you can grab a patch
from http://github.com/mnagy/bind-dynamic_db/downloads

For now the plug-in will bind anonymously and won't be able to update.
It could do that, but for now I would have to put the DS password to
the config file.. I don't expect that we want to be able to
dynamically update the initial zone, so hopefully this is ok for now.

I tried to install freeipa with this patch on a clean VM and didn't
hit any problems (well, yeah, I did, but I fixed them before
submitting ;). Any questions and criticism is welcome. Thanks.

Martin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Move-the-__ldap_mod-function-to-the-Service-class.patch
Type: text/x-patch
Size: 8515 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20090512/3889870b/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-Change-DNS-LDAP-attributes.patch
Type: text/x-patch
Size: 8859 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20090512/3889870b/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0003-Use-LDAP-instead-of-flat-file-for-zone-storage.patch
Type: text/x-patch
Size: 10141 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20090512/3889870b/attachment-0002.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0004-Use-root.-HOST.-DOMAIN.-instead-of-root.-DOMAIN.patch
Type: text/x-patch
Size: 714 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20090512/3889870b/attachment-0003.bin>


More information about the Freeipa-devel mailing list