[Freeipa-devel] [PATCH] 286-288 Warn when ID range with incorrect size was created

Martin Kosek mkosek at redhat.com
Wed Jul 11 15:20:22 UTC 2012


IPA 3.0 introduced range ID objects in replicated space which specify
a range of IDs assigned via DNA plugin. ipa-ldap-updater generates the
default ID range which should correspond with IDs assigned to IPA
users.

However, since correct range size is not known, we should at least
warn that a range with invalid size was created so that user can
amend it.


I created 2 new tickets to add further improve this area:

1) #2918: [doc] Upgrade procedure section should mention ipa-ldap-updater
2) #2919: Improve safety checks in range command


To test this patch, you can:
1) Install unpatched IPA server (and you may install replicas too) with custom
--idstart and --idmax options where difference is greater then 200000
2) Remove default range with range-del command (will be restored during upgrade)
3) Run RPM upgrade with RPMs built from patched sources - ERROR should now be
printed during update stating that a new range was created but its size is not
right

Martin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mkosek-286-add-range-mod-command.patch
Type: text/x-patch
Size: 8298 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20120711/3a4f2f17/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mkosek-287-id-range-warning.patch
Type: text/x-patch
Size: 5670 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20120711/3a4f2f17/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mkosek-288-ipa-ldap-updater-errors.patch
Type: text/x-patch
Size: 1955 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20120711/3a4f2f17/attachment-0002.bin>


More information about the Freeipa-devel mailing list