389-ds-base

#51163 Ticket 50544 - OpenLDAP syncrepl compatability
Closed by spichugi. Opened by firstyear.
firstyear/389-ds-base 50544-openldap-syncrepl  into  master

Download 51163.patch

Bug Description: Some customers have asked for the ability to sync
openldap fro 389-ds in a read only mode. OpenLDAP's syncrepl
functionality is slightly different to what our module expected,
requiring changes to be made.

Fix Description: This fixes a number of syncrepl issues within
our plugin, works around a number of deviations from OpenLDAP's
syncrepl client, adds tests, and the needed schema to allow
OpenLDAP to sync from 389-ds.

Outstanding issue is that when the EntryUUID plugin is enabled, it
can confuse OpenLDAP, so a subsequent PR will address that issue.

Note, the provided tests require a fix to python-ldap, so you may
not be able to run these tests yet. See:
https://github.com/python-ldap/python-ldap/pull/351

https://pagure.io/389-ds-base/issue/50544

Author: William Brown william@blackhats.net.au

Review by: ???

I've asked IPA to run their sync repl tests on this patch. If it doesn't break anything it's gets my ack.

Thanks mate! I was pretty careful to avoid touching the existing paths. As mentioned there is an issue with python-ldap which appears to be fixed in 3.3.0 that could cause false negatives, so let me know if they hit any problems. :)

No regressions observed. Thanks for being patient, ACK

No problem, thanks so much for coordinating!

rebased onto 8f3887e08cb77c0d023a572462832b7e042b01ed

Pull-Request has been merged by firstyear

389-ds-base is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in 389-ds-base's github repository.

This pull request has been cloned to Github as issue and is available here:
- https://github.com/389ds/389-ds-base/issues/4216

If you want to continue to work on the PR, please navigate to the github issue,
download the patch from the attachments and file a new pull request.

Thank you for understanding. We apologize for all inconvenience.

Pull-Request has been closed by spichugi
Metadata
None
No Tags
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.