<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    Hi,<br>
    <br>
    the topology plugin relies on a change in DS to be able to mark
    replication agreements, this fix is in master and will be in
    1.3.3.11 (but I think it is not yet out)<br>
    <br>
    Ludwig<br>
    <br>
    <div class="moz-cite-prefix">On 05/29/2015 10:33 AM, Martin Basti
      wrote:<br>
    </div>
    <blockquote cite="mid:5568245D.2050806@redhat.com" type="cite">On
      29/05/15 09:23, Lukas Slebodnik wrote:
      <br>
      <blockquote type="cite">On (12/05/15 21:03), Martin Basti wrote:
        <br>
        <blockquote type="cite">On 12/05/15 18:23, Martin Basti wrote:
          <br>
          <blockquote type="cite"><a class="moz-txt-link-freetext" href="https://fedorahosted.org/freeipa/ticket/4921">https://fedorahosted.org/freeipa/ticket/4921</a>
            <br>
            <br>
            To test this, the mkosek/freeipa-master copr repo with
            389-ds-base 1.3.4.0
            <br>
            is needed.
            <br>
            <br>
            All previous changes to uniqueness plugins were made just in
            master branch
            <br>
            so upgrade will not work correctly from master to newer
            master.
            <br>
          </blockquote>
          >From IPA 4.1 to master should work as expected.
          <br>
          <blockquote type="cite">Patch attached.
            <br>
            <br>
            <br>
            <br>
          </blockquote>
          Updated patch attached.
          <br>
          <br>
          -- <br>
          Martin Basti
          <br>
          <br>
        </blockquote>
        >From df2f521473a7e4f2438f675e4328ee59c8cf4617 Mon Sep 17
        00:00:00 2001
        <br>
        <blockquote type="cite">From: Martin Basti
          <a class="moz-txt-link-rfc2396E" href="mailto:mbasti@redhat.com"><mbasti@redhat.com></a>
          <br>
          Date: Tue, 12 May 2015 18:11:07 +0200
          <br>
          Subject: [PATCH] Server Upgrade: Fix uniqueness plugins
          <br>
          <br>
          Due previous changes (in master branch only) the uniqueness
          plugins
          <br>
          became misconfigured.
          <br>
          <br>
          After this patch:
          <br>
          * whole $SUFFIX will be checked by unique plugins
          <br>
          * just staged users are exluded from check
          <br>
          <br>
          This reverts some changes in commit
          <br>
          52b7101c1148618d5c8e2ec25576cc7ad3e9b7bb
          <br>
          <br>
          Since 389-ds-base 1.3.4.a1 new attribute
          'uniqueness-exclude-subtrees'
          <br>
          can be used.
          <br>
          <br>
          <a class="moz-txt-link-freetext" href="https://fedorahosted.org/freeipa/ticket/4921">https://fedorahosted.org/freeipa/ticket/4921</a>
          <br>
          ---
          <br>
          freeipa.spec.in                      |  6 +++---
          <br>
          install/share/unique-attributes.ldif | 12 ++++++------
          <br>
          install/updates/10-uniqueness.update | 20 ++++++--------------
          <br>
          3 files changed, 15 insertions(+), 23 deletions(-)
          <br>
          <br>
          diff --git a/freeipa.spec.in b/freeipa.spec.in
          <br>
          index
          2bf14ef9e14f96b3100d45dd47d749b6bc3b4816..73736455655a100a2febef8e86db2c5a2f2419c9
          100644
          <br>
          --- a/freeipa.spec.in
          <br>
          +++ b/freeipa.spec.in
          <br>
          @@ -34,7 +34,7 @@ Source0:        freeipa-%{version}.tar.gz
          <br>
          BuildRoot:     
          %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
          <br>
          <br>
          %if ! %{ONLY_CLIENT}
          <br>
          -BuildRequires:  389-ds-base-devel >= 1.3.3.9
          <br>
          +BuildRequires:  389-ds-base-devel >= 1.3.4.a1
          <br>
        </blockquote>
        Please revert this change. FreeIPA can be built 1.3.3.9 as well.
        <br>
        and it block scanning pacakge with static analysers even on
        fedora-rawhide.
        <br>
        <br>
        I managed to build pacakges with 389-ds-base 1.3.3.9.
        <br>
        It should be sufficient to have Requires for 1.3.4.a1.
        <br>
        <br>
        <br>
        <br>
        <blockquote type="cite">BuildRequires:  svrcore-devel
          <br>
          BuildRequires:  policycoreutils >= 2.1.12-5
          <br>
          BuildRequires:  systemd-units
          <br>
          @@ -109,7 +109,7 @@ Group: System Environment/Base
          <br>
          Requires: %{name}-python = %{version}-%{release}
          <br>
          Requires: %{name}-client = %{version}-%{release}
          <br>
          Requires: %{name}-admintools = %{version}-%{release}
          <br>
          -Requires: 389-ds-base >= 1.3.3.9
          <br>
          +Requires: 389-ds-base >= 1.3.4.a1
          <br>
          Requires: openldap-clients > 2.4.35-4
          <br>
          Requires: nss >= 3.14.3-12.0
          <br>
          Requires: nss-tools >= 3.14.3-12.0
          <br>
          @@ -144,7 +144,7 @@ Requires: zip
          <br>
          Requires: policycoreutils >= 2.1.12-5
          <br>
          Requires: tar
          <br>
          Requires(pre): certmonger >= 0.76.8
          <br>
          -Requires(pre): 389-ds-base >= 1.3.3.9
          <br>
          +Requires(pre): 389-ds-base >= 1.3.4.a1
          <br>
          Requires: fontawesome-fonts
          <br>
          Requires: open-sans-fonts
          <br>
          Requires: openssl
          <br>
        </blockquote>
        LS
        <br>
      </blockquote>
      Patch attached.
      <br>
      <br>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
    </blockquote>
    <br>
  </body>
</html>