#8831 update_dna_shared_config may not update all entries
Closed: fixed a year ago by frenaud. Opened a year ago by cheimes.

Issue

The server update plugin update_dna_shared_config updates shared DNA configuration and adds dnaRemoteBindMethod=SASL/GSSAPI and dnaRemoteConnProtocol=LDAP to the host's entries under cn=posix-ids,cn=dna,cn=ipa,cn=etc,$SUFFIX. There are always two entries:

  • dnaHostname=fqdn+dnaPortNum=0
  • dnaHostname=fqdn+dnaPortNum=389

389-DS creates both entries. The second entry is created a couple of seconds later than the first. It's possible that the plugin only updates the first entry and then stops. This can cause replication issues for DNA until the first time ipa-server-update is executed.

Steps to Reproduce

  1. Create server and replica
  2. Check entries under cn=posix-ids,cn=dna,cn=ipa,cn=etc,$SUFFIX

Actual behavior

The entries with dnaPortNumber=389 are missing remote bind method and protocol attributes.

Expected behavior

All attributes have remote bind method and protocol configuration.


Metadata Update from @cheimes:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/5752

a year ago

master:

  • 45d9a66 Fix update_dna_shared_config to wait for both entries
  • 5c92a71 Move constants, document timeout loop

ipa-4-8:

  • ccd9a2e Fix update_dna_shared_config to wait for both entries
  • 1afe43f Move constants, document timeout loop

ipa-4-9:

  • 74889cf Fix update_dna_shared_config to wait for both entries
  • 7e9407d Move constants, document timeout loop

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

a year ago

Login to comment on this ticket.

Metadata