Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Issue 5245 - RFE - default add krb schema. #5246

Closed
wants to merge 1 commit into from

Conversation

Firstyear
Copy link
Contributor

Bug Description: We ship a number of schemas as examples, including 60kerberos.ldif. This is used
when someone wants to store their kdc db into ldap. To make it easier for people to use this
configuration, we should install it by default into /usr/share/dirsrv/schema

Fix Description: Enable it as a default

fixes: #5245

Author: William Brown william@blackhats.net.au

Review by: ???

Bug Description: We ship a number of schemas as examples, including 60kerberos.ldif. This is used
when someone wants to store their kdc db into ldap. To make it easier for people to use this
configuration, we should install it by default into /usr/share/dirsrv/schema

Fix Description: Enable it as a default

fixes: 389ds#5245

Author: William Brown <william@blackhats.net.au>

Review by: ???
@tbordaz
Copy link
Contributor

tbordaz commented Apr 7, 2022

There will be collision between 389-ds 60kerberos.ldif and freeipa 60kerberos.ldif. Freeipa is a superset of 389-ds.
In addition, freeipa install script may have to take into account this new schema file.

Checking with the ipa team

@tbordaz
Copy link
Contributor

tbordaz commented Apr 7, 2022

Following custom schema recommendations, the custom definitions in IPA will likely be overwritten by default definitions.

Initial thoughts: On fresh install, IPA installer should remove /usr/share/dirsrv/schema/60kerberos.ldif. On upgrade IPA install should do the same and 389 upgrade function should do the same.

@Firstyear, this change has a significant impact both in dev and qe. Is it justified ?
Why not simply documenting that customer with their kdc ldap have to copy the file from 'data' to 'schema' ?

@Firstyear
Copy link
Contributor Author

Okay, we'll handle it differently. We had people asking for it by default, but we can just handle that on the SUSE side.

@Firstyear Firstyear closed this Apr 12, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Default install of krb kdc schema
2 participants