[Freeipa-devel] using 389-ds-base with betxn plugins enabled

[Rich Megginson]

I'm testing with f18, freeipa-server 3.0.0, 389-ds-base-1.3.0.a1, with 
betxn manually enabled in all plugins in 389.  I did an ipa-server-install.

I have ipa user-add --all --raw working - it returns the mep and 
memberof attributes immediately.  I had to do something like this:

diff --git a/ipalib/plugins/user.py b/ipalib/plugins/user.py
index 5d667dc..5a490bb 100644
--- a/ipalib/plugins/user.py
+++ b/ipalib/plugins/user.py
@@ -568,6 +568,11 @@ class user_add(LDAPCreate):
                  newentry = wait_for_value(ldap, dn, 'objectclass', 
'mepOriginEntry')
                  entry_from_entry(entry_attrs, newentry)

+        if not self.api.env.wait_for_attr:
+            # have to update memberof, mep data in entry to return
+            (newdn, newentry) = ldap.get_entry(dn, ['*'])
+            entry_attrs.update(newentry)
+
          if options.get('random', False):
              try:
                  entry_attrs['randompassword'] = 
unicode(getattr(context, 'randompassword'))

That is, after user_add.post_callback adds the user to the group, it 
needs to get the updated memberof attribute from the user entry, as well 
as the mep data.  I think there are several other places in the code 
where wait_for_attr and wait_for_attr_memberof are used, that will have 
to change in a similar manner.  I don't know if this patch is the best 
way to solve the problem - I suppose it would be better to update only 
the memberof and objectclass and mepmanagedentry attributes in 
entry_attrs, but I'm not sure how to do that.