To limit bind of Directory Manager (account specified under nsslapd-rootdn), new plugin cn=RootDN Access Control,cn=plugins,cn=config was introduced. This plugin entry is missing in directory server after upgrading an old instance, but is present in fresh install.
An upgrade scriptlet needs to be added so this config entry gets created when 'setup-ds.pl -u' is run.
attachment 0001-Ticket-541-RootDN-Access-Control-plugin-is-missing-a.patch
Looks good except that we want nsslapd-pluginenabled: off for the upgrade case, same as the regular install case (i.e. it should be off by default).
$ git merge rootdn Updating 9c36be0..d0ee60f Fast-forward Makefile.am | 1 + Makefile.in | 422 +- aclocal.m4 | 114 +- compile | 228 +- config.guess | 259 +- config.h.in | 6 - config.sub | 204 +- configure |14853 +++++++++++++------- depcomp | 190 +- install-sh | 29 +- .../src/scripts/50rootdnaccesscontrolplugin.ldif | 15 + ltmain.sh | 3958 ++---- missing | 53 +- 13 files changed, 11379 insertions(+), 8953 deletions(-) create mode 100644 ldap/admin/src/scripts/50rootdnaccesscontrolplugin.ldif
$ git push origin master Counting objects: 36, done. Delta compression using up to 4 threads. Compressing objects: 100% (18/18), done. Writing objects: 100% (19/19), 113.52 KiB, done. Total 19 (delta 15), reused 1 (delta 0) To ssh://git.fedorahosted.org/git/389/ds.git 9c36be0..d0ee60f master -> master
$ git cherry-pick -x master Finished one cherry-pick. [389-ds-base-1.3.0 b12e69e] Ticket 541 - RootDN Access Control plugin is missing after upgrade 13 files changed, 11379 insertions(+), 8953 deletions(-) create mode 100644 ldap/admin/src/scripts/50rootdnaccesscontrolplugin.ldif
$ git push origin 389-ds-base-1.3.0 Counting objects: 36, done. Delta compression using up to 4 threads. Compressing objects: 100% (18/18), done. Writing objects: 100% (19/19), 113.57 KiB, done. Total 19 (delta 15), reused 1 (delta 0) To ssh://git.fedorahosted.org/git/389/ds.git 94e25a1..b12e69e 389-ds-base-1.3.0 -> 389-ds-base-1.3.0
$ git push origin 389-ds-base-1.2.11 Counting objects: 16, done. Delta compression using up to 4 threads. Compressing objects: 100% (8/8), done. Writing objects: 100% (9/9), 1.13 KiB, done. Total 9 (delta 6), reused 0 (delta 0) To ssh://git.fedorahosted.org/git/389/ds.git 85261ef..9a7fa90 389-ds-base-1.2.11 -> 389-ds-base-1.2.11
Amendment:
git push origin master Counting objects: 13, done. Delta compression using up to 4 threads. Compressing objects: 100% (6/6), done. Writing objects: 100% (7/7), 583 bytes, done. Total 7 (delta 5), reused 0 (delta 0) To ssh://git.fedorahosted.org/git/389/ds.git d0ee60f..1f71959 master -> master [mareynol@localhost scripts]$ git checkout 389-ds-base-1.2.11 Switched to branch '389-ds-base-1.2.11' [mareynol@localhost scripts]$ git cherry-pick -x master Finished one cherry-pick. [389-ds-base-1.2.11 d324d67] Ticket 541 - need to set plugin as off in ldif template 1 files changed, 1 insertions(+), 1 deletions(-)
[mareynol@localhost scripts]$ git push origin 389-ds-base-1.2.11 Counting objects: 13, done. Delta compression using up to 4 threads. Compressing objects: 100% (6/6), done. Writing objects: 100% (7/7), 632 bytes, done. Total 7 (delta 5), reused 0 (delta 0) To ssh://git.fedorahosted.org/git/389/ds.git 9a7fa90..d324d67 389-ds-base-1.2.11 -> 389-ds-base-1.2.11
[mareynol@localhost scripts]$ git checkout 389-ds-base-1.3.0 Branch 389-ds-base-1.3.0 set up to track remote branch 389-ds-base-1.3.0 from origin. Switched to a new branch '389-ds-base-1.3.0' [mareynol@localhost scripts]$ git cherry-pick -x master Finished one cherry-pick. [389-ds-base-1.3.0 b3e16f0] Ticket 541 - need to set plugin as off in ldif template 1 files changed, 1 insertions(+), 1 deletions(-)
[mareynol@localhost scripts]$ git push origin 389-ds-base-1.3.0 Counting objects: 13, done. Delta compression using up to 4 threads. Compressing objects: 100% (6/6), done. Writing objects: 100% (7/7), 635 bytes, done. Total 7 (delta 5), reused 0 (delta 0) To ssh://git.fedorahosted.org/git/389/ds.git b12e69e..b3e16f0 389-ds-base-1.3.0 -> 389-ds-base-1.3.0
Here are the commits needed for 6.4
commit d324d67 Author: Mark Reynolds mreynolds@redhat.com Date: Tue Dec 18 16:04:01 2012 -0500
Ticket 541 - need to set plugin as off in ldif template
commit 9a7fa90 Author: Mark Reynolds mreynolds@redhat.com Date: Tue Dec 18 15:58:32 2012 -0500
Ticket 541 - RootDN Access Control plugin is missing after upgrade
Metadata Update from @mreynolds: - Issue assigned to mreynolds - Issue set to the milestone: 1.2.11.18
389-ds-base is moving from Pagure to Github. This means that new issues and pull requests will be accepted only in 389-ds-base's github repository.
This issue has been cloned to Github and is available here: - https://github.com/389ds/389-ds-base/issues/541
If you want to receive further updates on the issue, please navigate to the github issue and click on subscribe button.
subscribe
Thank you for understanding. We apologize for all inconvenience.
Metadata Update from @spichugi: - Issue close_status updated to: wontfix (was: Fixed)
Log in to comment on this ticket.