On 10/07/2014 08:48 PM, Nathaniel McCallum wrote: > On Tue, 2014-10-07 at 10:52 -0700, Noriko Hosoi wrote: >> On 2014/10/07 10:48, Nathaniel McCallum wrote: >>> On Tue, 2014-10-07 at 18:54 +0200, thierry bordaz wrote: >>>> On 10/07/2014 06:00 PM, Nathaniel McCallum wrote: >>>> >>>>> Attached is the latest patch. I believe this includes all of our >>>>> discussions up until this point. However, a few bits of additional >>>>> information are needed. >>>>> >>>>> First, I have renamed the plugin to ipa-otp-counter. I believe all >>>>> replay prevention work can land inside this plugin, so the name is >>>>> appropriate. >>>>> >>>>> Second, I uncovered a bug in 389 which prevents me from validating the >>>>> non-replication request in bepre. This is the reason for the additional >>>>> betxnpre callback. If the upstream 389 bug is fixed, we can merge this >>>>> check back into bepre. https://fedorahosted.org/389/ticket/47919 >>>> Hi Nathaniel, >>>> >>>> Just a rapid question about that dependency on >>>> https://fedorahosted.org/389/ticket/47919. >>>> Using txnpreop_mod you manage to workaround the DS issue. >>>> Do you need a fix for the DS issue in 1.3.2 or can it be fixed >>>> in a later version ? >>> I would strongly prefer a fix ASAP. >> Thanks, Nathaniel, >> Do you need the fix just in 389-ds-base-1.3.3.x on F21 and newer? Or any >> other versions, e.g., 1.3.2 on F20, 1.3.3.1-x on RHEL-7.1, etc... ? > > I think we are just shipping 4.1 on F21. Someone please correct me if > I'm wrong.
FreeIPA 4.x already requires DS 1.3.3.*, so fixing from this version is sufficient for us. We have a Copr repo for Fedora 20 anyway, so we will just rebuild the updated DS there. Martin _______________________________________________ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
