#541 RootDN Access Control plugin is missing after upgrade
Closed: Fixed None Opened 6 years ago by nkinder.

To limit bind of Directory Manager (account specified under nsslapd-rootdn),
new plugin cn=RootDN Access Control,cn=plugins,cn=config was introduced. This
plugin entry is missing in directory server after upgrading an old instance, but is present in fresh install.

An upgrade scriptlet needs to be added so this config entry gets created when 'setup-ds.pl -u' is run.


Looks good except that we want
nsslapd-pluginenabled: off
for the upgrade case, same as the regular install case (i.e. it should be off by default).

$ git merge rootdn
Updating 9c36be0..d0ee60f
Fast-forward
Makefile.am | 1 +
Makefile.in | 422 +-
aclocal.m4 | 114 +-
compile | 228 +-
config.guess | 259 +-
config.h.in | 6 -
config.sub | 204 +-
configure |14853 +++++++++++++-------
depcomp | 190 +-
install-sh | 29 +-
.../src/scripts/50rootdnaccesscontrolplugin.ldif | 15 +
ltmain.sh | 3958 ++----
missing | 53 +-
13 files changed, 11379 insertions(+), 8953 deletions(-)
create mode 100644 ldap/admin/src/scripts/50rootdnaccesscontrolplugin.ldif

$ git push origin master
Counting objects: 36, done.
Delta compression using up to 4 threads.
Compressing objects: 100% (18/18), done.
Writing objects: 100% (19/19), 113.52 KiB, done.
Total 19 (delta 15), reused 1 (delta 0)
To ssh://git.fedorahosted.org/git/389/ds.git
9c36be0..d0ee60f master -> master

$ git cherry-pick -x master
Finished one cherry-pick.
[389-ds-base-1.3.0 b12e69e] Ticket 541 - RootDN Access Control plugin is missing after upgrade
13 files changed, 11379 insertions(+), 8953 deletions(-)
create mode 100644 ldap/admin/src/scripts/50rootdnaccesscontrolplugin.ldif

$ git push origin 389-ds-base-1.3.0
Counting objects: 36, done.
Delta compression using up to 4 threads.
Compressing objects: 100% (18/18), done.
Writing objects: 100% (19/19), 113.57 KiB, done.
Total 19 (delta 15), reused 1 (delta 0)
To ssh://git.fedorahosted.org/git/389/ds.git
94e25a1..b12e69e 389-ds-base-1.3.0 -> 389-ds-base-1.3.0

$ git push origin 389-ds-base-1.2.11
Counting objects: 16, done.
Delta compression using up to 4 threads.
Compressing objects: 100% (8/8), done.
Writing objects: 100% (9/9), 1.13 KiB, done.
Total 9 (delta 6), reused 0 (delta 0)
To ssh://git.fedorahosted.org/git/389/ds.git
85261ef..9a7fa90 389-ds-base-1.2.11 -> 389-ds-base-1.2.11

Amendment:

git push origin master
Counting objects: 13, done.
Delta compression using up to 4 threads.
Compressing objects: 100% (6/6), done.
Writing objects: 100% (7/7), 583 bytes, done.
Total 7 (delta 5), reused 0 (delta 0)
To ssh://git.fedorahosted.org/git/389/ds.git
d0ee60f..1f71959 master -> master
[mareynol@localhost scripts]$ git checkout 389-ds-base-1.2.11
Switched to branch '389-ds-base-1.2.11'
[mareynol@localhost scripts]$ git cherry-pick -x master
Finished one cherry-pick.
[389-ds-base-1.2.11 d324d67] Ticket 541 - need to set plugin as off in ldif template
1 files changed, 1 insertions(+), 1 deletions(-)

[mareynol@localhost scripts]$ git push origin 389-ds-base-1.2.11
Counting objects: 13, done.
Delta compression using up to 4 threads.
Compressing objects: 100% (6/6), done.
Writing objects: 100% (7/7), 632 bytes, done.
Total 7 (delta 5), reused 0 (delta 0)
To ssh://git.fedorahosted.org/git/389/ds.git
9a7fa90..d324d67 389-ds-base-1.2.11 -> 389-ds-base-1.2.11

[mareynol@localhost scripts]$ git checkout 389-ds-base-1.3.0
Branch 389-ds-base-1.3.0 set up to track remote branch 389-ds-base-1.3.0 from origin.
Switched to a new branch '389-ds-base-1.3.0'
[mareynol@localhost scripts]$ git cherry-pick -x master
Finished one cherry-pick.
[389-ds-base-1.3.0 b3e16f0] Ticket 541 - need to set plugin as off in ldif template
1 files changed, 1 insertions(+), 1 deletions(-)

[mareynol@localhost scripts]$ git push origin 389-ds-base-1.3.0
Counting objects: 13, done.
Delta compression using up to 4 threads.
Compressing objects: 100% (6/6), done.
Writing objects: 100% (7/7), 635 bytes, done.
Total 7 (delta 5), reused 0 (delta 0)
To ssh://git.fedorahosted.org/git/389/ds.git
b12e69e..b3e16f0 389-ds-base-1.3.0 -> 389-ds-base-1.3.0

Here are the commits needed for 6.4

commit d324d67
Author: Mark Reynolds mreynolds@redhat.com
Date: Tue Dec 18 16:04:01 2012 -0500

Ticket 541 - need to set plugin as off in ldif template

commit 9a7fa90
Author: Mark Reynolds mreynolds@redhat.com
Date: Tue Dec 18 15:58:32 2012 -0500

Ticket 541 - RootDN Access Control plugin is missing after upgrade

Metadata Update from @mreynolds:
- Issue assigned to mreynolds
- Issue set to the milestone: 1.2.11.18

2 years ago

Login to comment on this ticket.

Metadata