[Freeipa-devel] [PATCH 0238] ipaldap: Override conversion of nsds5replicalastupdatestart

[Tomas Babej]

Hi,

The replication related attributes nsds5replicalastupdatestart and
nsds5replicalastupdateend have special behaviour implemented in 389,
as follows:

In case they are explicitly requested for and not set, 0 is returned.

However, 0 is not a valid value for LDAP Generalized time. Thus
we need to add these attributes to the _SYNTAX_OVERRIDE dictionary,
overriding their conversion to datetime and converting them to
string instead, which preserves the old behaviour expected by the
replication codebase.

https://fedorahosted.org/freeipa/ticket/4350

Note: This makes patch 236 obsolete.
Note II: This is a short-term fix from my point of view. Ticket to
resolve the underlying issue has been filed to 389:

https://fedorahosted.org/389/ticket/47836


-- 
Tomas Babej
Associate Software Engineer | Red Hat | Identity Management
RHCE | Brno Site | IRC: tbabej | freeipa.org 


-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-tbabej-0238-ipaldap-Override-conversion-of-nsds5replicalastupdat.patch
Type: text/x-patch
Size: 1436 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20140701/81a300d9/attachment.bin>