[Freeipa-devel] [PATCH 0073] Remove support for IPA deployments with no persistent search

Tomas Babej tbabej at redhat.com
Wed Aug 7 14:52:29 UTC 2013


On 08/05/2013 05:59 PM, Martin Kosek wrote:
> On 07/17/2013 01:47 PM, Tomas Babej wrote:
>>> I will release version 3.5 before end of this week. I have some small fixes
>>> ready so it is worth to release it now.
>>>
>>> To summarize the discussion - please remove following options from
>>> configuration file and LDAP schema:
>>> cache_ttl
>>> psearch (attribute idnsPersistentSearch in idnsConfigObject)
>>> zone_refresh (attribute idnsZoneRefresh in idnsConfigObject)
>>>
>>> -- 
>>> Petr^2 Spacek
>> I have a patch ready, but it can't be tested until 3.5 is out.
>>
>> Tomas
>>
> I did not test the patch yet, I just want to comment on one thing I just noticed.
>
> I is it a good idea to remove idnsZoneRefresh and idnsPersistentSearch
> attribute types and modify idnsConfigObject objectclass?
>
> This will affect not only new instances, but also the old ones (i.e. RHEL-6.4)
> which may still use these attributes. DNS config object would suddenly become
> unusable because DS would refuse to operate the entry as it does not follow the
> schema. The same applies for ACIs.
>
> I would personally not do these changes yet, I think just hiding and marking as
> DeprecatedParam is enough for now. Alexander, what do you think?
>
> Martin
We discussed this with Martin. I agreed it would be less cumbersome to
keep the attributes in schema for now.

I retested the patches, updated versions attached.

Petr, can bind-dyndb-ldap handle idnsConfigObject containing 
idnsPersistentSearch
and idnsZoneRefresh attributes?

-- 
Tomas Babej
Associate Software Engeneer | Red Hat | Identity Management
RHCE | Brno Site | IRC: tbabej | freeipa.org

-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-tbabej-0073-6-Remove-support-for-IPA-deployments-with-no-persisten.patch
Type: text/x-patch
Size: 33442 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20130807/d6da49bc/attachment.bin>


More information about the Freeipa-devel mailing list