[Freeipa-devel] topologysegment-mod question

Petr Vobornik pvoborni at redhat.com
Wed Jun 24 10:28:16 UTC 2015


On 06/24/2015 12:19 PM, Oleg Fayans wrote:
> Hi Ludwig,
>
> I see some contradictions in the way the segment modification cli is
> implemented:
>
> 1.
> $ ipa help topologysegment-mod
> Usage: ipa [global-options] topologysegment-mod TOPOLOGYSUFFIX NAME
> [options]
>
> $ ipa topologysegment-mod realm 127-to-244 --setattr=Segment name=test
> ipa: ERROR: command 'topologysegment_mod' takes at most 2 arguments
>
> (suffix + name + options = 3, not 2)

'Segment name' is not correct attribute name. More below.

>
> 2.
> Is there a way to list all possible attributes available for modification?
> When do topologysegment-show --all, I get quite a small number of them,
> and even them I am unable to modify:
>
> $ ipa topologysegment-show realm 127-to-244 --all
>    dn:
> cn=127-to-244,cn=realm,cn=topology,cn=ipa,cn=etc,dc=idm,dc=lab,dc=eng,dc=brq,dc=redhat,dc=com
>
>    Segment name: 127-to-244
>    Left node: vm-127.idm.lab.eng.brq.redhat.com
>    Right node: vm-244.idm.lab.eng.brq.redhat.com
>    Connectivity: both
>    objectclass: top, iparepltoposegment
>
> $ ipa topologysegment-mod realm 127-to-244
> --setattr=connectivity=left-right
> ipa: ERROR: attribute "connectivity" not allowed
> $ ipa topologysegment-mod realm 127-to-244 --setattr=direction=left-right
> ipa: ERROR: attribute "direction" not allowed
>

--XXXattr options work with LDAP attributes names. 'direction' is the 
option name but not attribute name. Attribute name is 
iparepltoposegmentdirection.

You can see the mappings in, e.g.,:
   ipa show-mappings topologysegment-mod






-- 
Petr Vobornik




More information about the Freeipa-devel mailing list