Update ACIs with the correct syntax

[vashirov]

The value of the first character in target* keywords
is expected to be a double quote.

Fixes: https://pagure.io/dogtagpki/issue/3173

Signed-off-by: Viktor Ashirov vashirov@redhat.com

[vashirov]

I'd need some help with the upgrade scripts to update existing installations.

[edewata]

Thanks for the PR. So this will fix new installations only.

Will the DS automatically fix the ACIs already in the database? Or do we have to find existing ACIs and fix it with ldapmodify? Currently PKI doesn't have an automatic database upgrade mechanism. If you could provide a script (preferrably in Python) that can find the ACIs in the DS and fix them that'll be great.

[cipherboy]

I'm fine with this. Curious about the need for migration (whether DS will handle the upgrade itself or not).

[vashirov]

DS doesn't handle automatic update of ACIs, but we plan to add an ACI linter to DS healthcheck tool to find these invalid entries and help users/admins fix them.
Strict syntax checking will be disabled by default for now, so that existing installations won't be affected.

[edewata]

Merging. We can deal with upgrade either manually or automatically later. Thanks!