From 645615958d4b0f9e6dd8a5ff2541952abb588d55 Mon Sep 17 00:00:00 2001
From: Stanislav Laznicka <slaznick@redhat.com>
Date: Apr 24 2017 15:11:51 +0000
Subject: compat: ignore cn=topology,cn=ipa,cn=etc subtree


The entries in cn=topology,cn=ipa,cn=etc should not be taken in
account for the compat plugin.

https://pagure.io/freeipa/issue/6821

Reviewed-By: Martin Basti <mbasti@redhat.com>

---

diff --git a/install/updates/80-schema_compat.update b/install/updates/80-schema_compat.update
index 06cbcab..7483518 100644
--- a/install/updates/80-schema_compat.update
+++ b/install/updates/80-schema_compat.update
@@ -152,6 +152,7 @@ remove: schema-compat-ignore-subtree: o=ipaca
 add: schema-compat-restrict-subtree: $SUFFIX
 add: schema-compat-restrict-subtree: cn=Schema Compatibility,cn=plugins,cn=config
 add: schema-compat-ignore-subtree: cn=dna,cn=ipa,cn=etc,$SUFFIX
+add: schema-compat-ignore-subtree: cn=topology,cn=ipa,cn=etc,$SUFFIX
 
 # Change padding for host and userCategory so the pad returns the same value
 # as the original, '' or -.
@@ -162,6 +163,7 @@ remove: schema-compat-ignore-subtree: o=ipaca
 add: schema-compat-restrict-subtree: $SUFFIX
 add: schema-compat-restrict-subtree: cn=Schema Compatibility,cn=plugins,cn=config
 add: schema-compat-ignore-subtree: cn=dna,cn=ipa,cn=etc,$SUFFIX
+add: schema-compat-ignore-subtree: cn=topology,cn=ipa,cn=etc,$SUFFIX
 
 dn: cn=computers, cn=Schema Compatibility, cn=plugins, cn=config
 default:objectClass: top
@@ -181,6 +183,7 @@ remove: schema-compat-ignore-subtree: o=ipaca
 add: schema-compat-restrict-subtree: $SUFFIX
 add: schema-compat-restrict-subtree: cn=Schema Compatibility,cn=plugins,cn=config
 add: schema-compat-ignore-subtree: cn=dna,cn=ipa,cn=etc,$SUFFIX
+add: schema-compat-ignore-subtree: cn=topology,cn=ipa,cn=etc,$SUFFIX
 
 dn: cn=sudoers,cn=Schema Compatibility,cn=plugins,cn=config
 add:schema-compat-entry-attribute: sudoOrder=%{sudoOrder}
@@ -191,6 +194,7 @@ remove: schema-compat-ignore-subtree: o=ipaca
 add: schema-compat-restrict-subtree: $SUFFIX
 add: schema-compat-restrict-subtree: cn=Schema Compatibility,cn=plugins,cn=config
 add: schema-compat-ignore-subtree: cn=dna,cn=ipa,cn=etc,$SUFFIX
+add: schema-compat-ignore-subtree: cn=topology,cn=ipa,cn=etc,$SUFFIX
 
 dn: cn=groups,cn=Schema Compatibility,cn=plugins,cn=config
 remove: schema-compat-ignore-subtree: cn=changelog
@@ -198,6 +202,7 @@ remove: schema-compat-ignore-subtree: o=ipaca
 add: schema-compat-restrict-subtree: $SUFFIX
 add: schema-compat-restrict-subtree: cn=Schema Compatibility,cn=plugins,cn=config
 add: schema-compat-ignore-subtree: cn=dna,cn=ipa,cn=etc,$SUFFIX
+add: schema-compat-ignore-subtree: cn=topology,cn=ipa,cn=etc,$SUFFIX
 
 dn: cn=Schema Compatibility,cn=plugins,cn=config
 # We need to run schema-compat pre-bind callback before