Configuration of the plugins was changed from:
remove:uniqueness-subtrees:'$SUFFIX'
to
add:uniqueness-subtrees:'cn=accounts,$SUFFIX' add:uniqueness-subtrees:'cn=deleted users,cn=accounts,cn=provisioning,$SUFFIX'
Unfortunately, following subtrees containing ipaUniqueID are not checked anymore:
cn=hbac,$SUFFIX cn=ng,cn=alt,$SUFFIX cn=usermap,cn=selinux,dc=dev,$SUFFIX cn=sudorules,cn=sudo,$SUFFIX cn=sudocmds,cn=sudo,$SUFFIX ... maybe more ...
Copy paste error in description, fix here:
uniqueness-subtrees:'$SUFFIX'
uniqueness-subtrees:'cn=accounts,$SUFFIX' uniqueness-subtrees:'cn=deleted users,cn=accounts,cn=provisioning,$SUFFIX'
With https://fedorahosted.org/389/ticket/47828, ipaUniqueID uniqueness should ignore stage container
krbPrincipalName uniqueness is affected too.
master:
Metadata Update from @mbasti: - Issue assigned to mbasti - Issue set to the milestone: FreeIPA 4.2
Login to comment on this ticket.