freeipa

#5665 upgrade is broken for sidgen and extdom plugins
Closed: Fixed Opened by abbra.

Closed: Fixed
Reopen Issue

When older FreeIPA configuration is updated to 4.2.x, new entries for sidgen and extdom plugins are created with ds_enable_sidgen_extdom_plugins() function. However, the dictionary used by a templating code does not have SUFFIX set properly and plugins' basedn attributes get set to "$SUFFIX" literally.

We need to fix the upgrade code and add another upgrade path that will fix the entries created by the older upgrade code. Those entries would exist, thus new upgrade code in ds_enable_sidgen_extdom_plugins() would skip them.

Linked to Bugzilla bug: https://bugzilla.redhat.com/show_bug.cgi?id=1305533 (Red Hat Enterprise Linux 7)

master:

  • 9818e463f5d0a91b300801ee7c8f31f25de402b2 upgrade: fix config of sidgen and extdom plugins
  • 70bd7c880259256840f2d4af181fb3e4ca96fcca trusts: use ipaNTTrustPartner attribute to detect trust entries
  • c96822f3e5af57f5f1f062a957778c84ad2b520d Warn user if trust is broken
  • 0accf8ccb64963954dbe7c137d23f52e5901ac4f fix upgrade: wait for proper DS socket after DS restart

ipa-4-3:

  • f12f8318fdf782f93e1988b616eeaebfc45e0b8c upgrade: fix config of sidgen and extdom plugins
  • 9c2797d27989428de573d75e643c2cd74065216f trusts: use ipaNTTrustPartner attribute to detect trust entries
  • 7dd4a7a0710fa288a52617eda2f877664fa31513 Warn user if trust is broken
  • 4734012c8063460f93f3b819a5bbcca797f6059e fix upgrade: wait for proper DS socket after DS restart

ipa-4-2:

  • 0ac22cf6fe93bb1e808af03d1cabb6f5424ad57b upgrade: fix config of sidgen and extdom plugins
  • 10ca4dfbd89637f84c4bab453be696d867f6646c trusts: use ipaNTTrustPartner attribute to detect trust entries
  • 4338161c9d22d170faec78c6609dc8724b96b8f7 Warn user if trust is broken
  • 63d8caf0d105f02decc0b5d865fedf6ad063bc1a fix upgrade: wait for proper DS socket after DS restart

Installation failed on 4.2 due this patchset

master:

  • fcc540bbdc5daa24990940124ec3bd439b05257d Fix connections to DS during installation

ipa-4-3:

  • c14fb0b9e0f4cb977e897645126ef7d1bbf9aa9e Fix connections to DS during installation

ipa-4-2:

  • e2ef561375c63a375710254f159f75d7318c514d Insure the admin_conn is disconnected on stop
  • 0af81913258b2f4c9841c5baddda146667282b2c Fix connections to DS during installation

Metadata Update from @abbra:
- Issue assigned to mbasti
- Issue set to the milestone: FreeIPA 4.2.4
Metadata
None
None
None
Low
defect
IPA
1
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.