freeipa

#8558 Create backend entry before creating mapping tree entry for ipaca backend
Closed: fixed by frenaud. Opened by mreynolds.

Closed: fixed
Reopen Issue

Request for enhancement

New validation efforts in 389-ds-base require that the backend entry for a database be created before the mapping tree entry. This enforces that the mapping tree entry (the suffix) actually belongs to an existing backend.

For IPA we simply need to reverse the order of the backend vs mapping tree creation in cainstance.py -> __create_ds_db()

Filed PR:

https://github.com/freeipa/freeipa/pull/5212

master:

  • 9c4785f042feb1fddbe579d07ff591a532e4f24d Reorder creation of the CA mapping tree and database backend

ipa-4-8:

  • 3366af6330a9ad82f5342d810954fc11718a32d9 Reorder creation of the CA mapping tree and database backend

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.