[Freeipa-devel] [PATCH 0242] Set the default attributes for RootDSE

[Petr Viktorin]

On 07/15/2014 09:13 AM, Tomas Babej wrote:
> Hi,
>
> With 389 DS 1.3.3 upwards we can leverage the nsslapd-return-default-opattr
> attribute to enumerate the list of attributes that should be returned
> even if not specified explicitly. Use the behaviour to get the same
> attributes
> returned from searches on rootDSE as in 1.3.1.
>
> https://fedorahosted.org/freeipa/ticket/4288

This fails with an older DS version.

Running transaction (shutdown inhibited)
   Updating   : freeipa-python-4.0.0GITa2b91d7-0.fc20.x86_64 
            1/14
   Updating   : freeipa-client-4.0.0GITa2b91d7-0.fc20.x86_64 
            2/14
Could not load host key: /etc/ssh/ssh_host_dsa_key
   Updating   : freeipa-admintools-4.0.0GITa2b91d7-0.fc20.x86_64 
            3/14
   Updating   : freeipa-server-4.0.0GITa2b91d7-0.fc20.x86_64 
            4/14
   Updating   : freeipa-server-trust-ad-4.0.0GITa2b91d7-0.fc20.x86_64 
            5/14
   Updating   : freeipa-tests-4.0.0GITa2b91d7-0.fc20.x86_64 
            6/14
   Updating   : freeipa-debuginfo-4.0.0GITa2b91d7-0.fc20.x86_64 
            7/14
   Cleanup    : freeipa-tests-4.0.0GIT06aa522-0.fc20.x86_64 
            8/14
   Cleanup    : freeipa-debuginfo-4.0.0GIT06aa522-0.fc20.x86_64 
            9/14
   Cleanup    : freeipa-server-trust-ad-4.0.0GIT06aa522-0.fc20.x86_64 
           10/14
   Cleanup    : freeipa-server-4.0.0GIT06aa522-0.fc20.x86_64 
           11/14
   Cleanup    : freeipa-admintools-4.0.0GIT06aa522-0.fc20.x86_64 
           12/14
   Cleanup    : freeipa-client-4.0.0GIT06aa522-0.fc20.x86_64 
           13/14
   Cleanup    : freeipa-python-4.0.0GIT06aa522-0.fc20.x86_64 
           14/14
Upgrade failed with attribute "nsslapd-return-default-opattr" not allowed
IPA upgrade failed.

You'll need to update the spec file too, at least.

-- 
Petr³