The default precedence of slapi plugins is 50 and all of them (ours and
the 389-ds plugins) all have this level with the exception of one (Retro
changelog). The IPA modrdn plugin should run after all of these so I've
bumped up the precedence to 60 as recommended by the 389-ds team.
https://fedorahosted.org/freeipa/ticket/1370
>From cf0357dd41c7ff530017b653d4fa1170fca412f5 Mon Sep 17 00:00:00 2001
From: Rob Crittenden
Date: Sat, 16 Jul 2011 13:35:30 -0400
Subject: [PATCH] Set the ipa-modrdn plugin precedence to 60 so it runs last
The default precedence for plugins is 50 and the run in more or less
alphabetical order (but not guaranteed). This plugin needs to run after
the others have already done their work.
https://fedorahosted.org/freeipa/ticket/1370
---
install/share/modrdn-krbprinc.ldif |1 +
install/updates/10-config.update |5 +
2 files changed, 6 insertions(+), 0 deletions(-)
diff --git a/install/share/modrdn-krbprinc.ldif b/install/share/modrdn-krbprinc.ldif
index b35ea25f49b1bbe853d81a574f02c8cd66c4addc..15e6d3c95755f4e53e840bbfcd74007e764b6836 100644
--- a/install/share/modrdn-krbprinc.ldif
+++ b/install/share/modrdn-krbprinc.ldif
@@ -9,3 +9,4 @@ ipaModRDNtargetAttr: krbPrincipalName
ipaModRDNsuffix: @$REALM
ipaModRDNfilter: (&(objectclass=posixaccount)(objectclass=krbPrincipalAux))
ipaModRDNscope: $SUFFIX
+nsslapd-pluginPrecedence: 60
diff --git a/install/updates/10-config.update b/install/updates/10-config.update
index ed7033950dd2a242a55dbe98c87a73998983384b..b3beefc8b11aa4bc92b1c25e444db8de9e2cc551 100644
--- a/install/updates/10-config.update
+++ b/install/updates/10-config.update
@@ -3,3 +3,8 @@
# upgrading.
dn: cn=config
only:nsslapd-ssl-check-hostname: on
+
+# Set the precedence of the ipa-modrdn plugin so it runs after other
+# plugins (the default is 50).
+dn: cn=Kerberos Principal Name,cn=IPA MODRDN,cn=plugins,cn=config
+only: nsslapd-pluginPrecedence: 60
--
1.7.4
___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel
