[Freeipa-users] attribute "dnaremotebindmethod" not allowed

[Ludwig Krispenz]

On 07/18/2014 09:50 AM, Martin Kosek wrote:
> On 07/17/2014 04:56 PM, Anthony Messina wrote:
>> After upgrading to Fedora 20's stable 389-ds-base-1.3.2.19-1.fc20.x86_64,
>> I noticed the following errors during the restart cycle.  I have a simple
>> 2 host MMR setup.  Should I be concerned about these?  If so, I'd be open
>> to recommendations.  Thanks.  -A
>>
>> [17/Jul/2014:07:51:50 -0500] - Entry
>> "dnaHostname=ipa1.example.com+dnaPortNum=389,cn=posix-
>> ids,cn=dna,cn=ipa,cn=etc,dc=example,dc=com" -- attribute
>> "dnaremotebindmethod" not allowed
>>
>> [17/Jul/2014:07:51:50 -0500] dna-plugin - dna_update_shared_config: Unable
>> to update shared config entry:
>> dnaHostname=ipa1.example.com+dnaPortNum=389,cn=posix-
>> ids,cn=dna,cn=ipa,cn=etc,dc=example,dc=com [error 65]
> CC-ing Ludwig and Thierry. Is it possible that 389 DS schema was not updated
> during it's upgrade? (Maybe related to
> https://fedorahosted.org/389/ticket/47779?) FreeIPA itself does not touch
> these attributes (yet).
the dnaremotebindmethod was added in June2013 to 
....schema/10dna-plugin.ldif and the dnaSharedConfig objectclass - so it 
should be there. And in my 1.3.219 installation it is.
Are you sure the entry you want to add has dnaSharedConfig and not 
(only) dnaPluginConfig ?
>
> Thanks,
> Martin