[Freeipa-devel] [PATCHES 529-530] ca install: use host credentials in domain level 1

[Martin Basti]

On 14.12.2015 07:53, Jan Cholasta wrote:
> On 11.12.2015 17:24, Martin Basti wrote:
>>
>>
>> On 11.12.2015 15:00, Jan Cholasta wrote:
>>> On 10.12.2015 09:51, Jan Cholasta wrote:
>>>> Hi,
>>>>
>>>> the attached patches fix 
>>>> <https://fedorahosted.org/freeipa/ticket/5399>.
>>>>
>>>> My patches 523-525 are required for this:
>>>> <https://www.redhat.com/archives/freeipa-devel/2015-December/msg00312.html>. 
>>>>
>>>>
>>>>
>>>>
>>>> Honza
>>>
>>> Rebased patches attached.
>>>
>> Patch works for me, but can you provide explanations (and update commit
>> message) why the ACI change is needed:
>>
>> * why it is moved three ACIs from 'cn="$SUFFIX",cn=mapping
>> tree,cn=config' to 'cn=mapping tree,cn=config'
>
> So that they apply to all replication agreements.
>
>> * why you removed completely 'dn: cn=o\3Dipaca,cn=mapping 
>> tree,cn=config'
>
> I didn't, they were moved to cn=mapping tree,cn=config as well.
>
> Updated patches attached.
>
ACK