Re: [Freeipa-devel] [PATCH 0406] Exclude o=ipaca from syncrepl
On 2016-01-21 11:29, Martin Basti wrote: > > > On 18.01.2016 17:55, Christian Heimes wrote: >> On 2016-01-18 17:28, Martin Basti wrote: >>> https://fedorahosted.org/freeipa/ticket/5538 >>> >>> Patch attached >> ACK >> >> > Pushed to: > master: 54a91c3ed33c7be54cadb188add802e781893ec9 > ipa-4-3: 89c32f2bdaf53a1408ea67fe19c0033cff202dfc > > Can I revert workaround in tests now? Yes, please give it a try. signature.asc Description: OpenPGP digital signature -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
Re: [Freeipa-devel] [PATCH 0406] Exclude o=ipaca from syncrepl
On 18.01.2016 17:55, Christian Heimes wrote: On 2016-01-18 17:28, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/5538 Patch attached ACK Pushed to: master: 54a91c3ed33c7be54cadb188add802e781893ec9 ipa-4-3: 89c32f2bdaf53a1408ea67fe19c0033cff202dfc Can I revert workaround in tests now? -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
Re: [Freeipa-devel] [PATCH 0406] Exclude o=ipaca from syncrepl
On 2016-01-18 17:28, Martin Basti wrote: > https://fedorahosted.org/freeipa/ticket/5538 > > Patch attached ACK signature.asc Description: OpenPGP digital signature -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
[Freeipa-devel] [PATCH 0406] Exclude o=ipaca from syncrepl
https://fedorahosted.org/freeipa/ticket/5538 Patch attached From cffdb8b4cc7af8edc1500069a375d62530b309fe Mon Sep 17 00:00:00 2001 From: Martin Basti Date: Mon, 18 Jan 2016 17:19:08 +0100 Subject: [PATCH] Exclude o=ipaca subtree from Retro Changelog (syncrepl) CA and DS have issues with Retro Changelog plugin. CA subtree should be excluded from syncrepl. This should improve speed of CA related operations too. https://fedorahosted.org/freeipa/ticket/5538 --- install/updates/20-syncrepl.update | 1 + 1 file changed, 1 insertion(+) diff --git a/install/updates/20-syncrepl.update b/install/updates/20-syncrepl.update index d2937d636209e15678f791ca807bdabe3cb01b0d..8b02133f5a755d599915d76682cf9fe6e3565768 100644 --- a/install/updates/20-syncrepl.update +++ b/install/updates/20-syncrepl.update @@ -4,6 +4,7 @@ only:nsslapd-pluginEnabled: on # Remember original nsuniqueid for objects referenced from cn=changelog add:nsslapd-attribute: nsuniqueid:targetUniqueId add:nsslapd-changelogmaxage: 2d +add:nsslapd-exclude-suffix: o=ipaca # Keep memberOf and referential integrity plugins away from cn=changelog. # It is necessary for performance reasons because we don't have appropriate -- 2.5.0 -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
