[Freeipa-devel] [PATCH] 262-265 Enable psearch by default

[Rob Crittenden]

Martin Kosek wrote:
> This set of patches handles enabling psearch both for new installations
> (patch 263) and upgraded IPA servers.
>
> For upgraded IPA servers I needed to make sure that psearch is not
> enabled for every IPA package update, but at most once, when a user
> updates to IPA with this patch for the first time (patch 264). This is
> enabled by a new State store located in /var/lib/ipa/sysupgrade (patch
> 262).
>
> I also improved the way we handled SELinux sebool updates (patch 265),
> this can make ipa-upgradeconfig to finish in 0.4 seconds and not in 150
> seconds as previously. Details are in the patches.
>
> Martin

262:
The sysupgrade directory isn't created by the RPM install:

mkdir -p %{buildroot}/%{_localstatedir}/cache/ipa/sysupgrade

263:

It looks like zone_refresh is simply disabled in bindinstance.py, why 
not remove it completely?

264:

Small nit, worth doing case-insensitive compare of psearch enabled status?

We're updating named.conf in place so I don't know that we need to reset 
permissions. It at least shouldn't get modified by the write.

rob