freeipa

#5488 During replica promotion /etc/openldap/ldap.conf is updated with the master URI
Closed: Fixed Opened by tbordaz.

Closed: Fixed
Reopen Issue

During replica promotion, configure_openldap_conf updates /etc/openldap/ldap.conf.
It adds something like:

URI ldaps://<master-fqdn>
BASE <suffix>
TLS_CACERT /etc/ipa/ca.crt

A side effect is that openldap tools (like ldapsearch) will access if the hostname is not specified in the command line.

This is a change of behavior, where before replica promotion the URI in ldap.conf was the one of the replica. With replica promotion, the URI is the one of the master

Not a blocker for 4.3 release.

master:

  • 23f5edb4be08b359c6acd8a18a5e23c3dd784136 reset ldap.conf to point to newly installer replica after promotion

ipa-4-3:

  • c61bc48de6a75a948adad2032bd69d96007be444 reset ldap.conf to point to newly installer replica after promotion

Metadata Update from @tbordaz:
- Issue assigned to mbabinsk
- Issue set to the milestone: FreeIPA 4.3.1
Metadata
None
None
None
Normal
defect
IPA
0
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.