[Freeipa-devel] [PATCHES 0061-0063] Extend ID range types <rebased>

[Alexander Bokovoy]

On Thu, 06 Jun 2013, Tomas Babej wrote:
>From 0580d3c03319c72d731d0598b19e633fc536b866 Mon Sep 17 00:00:00 2001
>From: Tomas Babej <tbabej at redhat.com>
>Date: Thu, 30 May 2013 14:07:09 +0200
>Subject: [PATCH 62/63] Add update plugin to fill in ipaRangeType attribute
>
>Previously, we deduced the range type from the range objectclass
>and filled in virtual attribute in post_callback phase.
>
>Having a ipaRangeType attributeType in schema, we need to fill
>the attribute values to ranges created in previous IPA versions.
>
>The plugin follows the same approach, setting ipa-local or
>ipa-ad-trust value to the ipaRangeType attribute according
>to the objectclass of the range.
>
>Part of https://fedorahosted.org/freeipa/ticket/3647
You need also to fix bootstrap template as ipaRangeType now is mandatory
attribute for the range class:
-----------------------------------------------------
add objectClass:
         top
         ipaIDrange
         ipaDomainIDRange
add cn:
         VDA.LI_id_range
add ipaBaseID:
         1393400000
add ipaIDRangeSize:
         200000
adding new entry "cn=VDA.LI_id_range,cn=ranges,cn=etc,dc=vda,dc=li"


2013-06-06T09:56:07Z DEBUG stderr=ldap_initialize(
ldap://red.espoo.vda.li:389/??base )
ldap_add: Object class violation (65)
         additional info: missing attribute "ipaRangeType" required by
object class "ipaIDrange"


2013-06-06T09:56:07Z CRITICAL Failed to load bootstrap-template.ldif:
Command '/usr/bin/ldapmodify -v -f /tmp/tmpkOLzK2 -H
ldap://red.espoo.vda.li:389 -x -D cn=Directory Manager -y
/tmp/tmpHb7d4F' returned non-zero exit status 65
2013-06-06T09:56:07Z DEBUG   duration: 3 seconds
------------------------------------------------------

-- 
/ Alexander Bokovoy