#8831 update_dna_shared_config may not update all entries
Closed: fixed by frenaud. Opened by cheimes.

Issue

The server update plugin update_dna_shared_config updates shared DNA configuration and adds dnaRemoteBindMethod=SASL/GSSAPI and dnaRemoteConnProtocol=LDAP to the host's entries under cn=posix-ids,cn=dna,cn=ipa,cn=etc,$SUFFIX. There are always two entries:

  • dnaHostname=fqdn+dnaPortNum=0
  • dnaHostname=fqdn+dnaPortNum=389

389-DS creates both entries. The second entry is created a couple of seconds later than the first. It's possible that the plugin only updates the first entry and then stops. This can cause replication issues for DNA until the first time ipa-server-update is executed.

Steps to Reproduce

  1. Create server and replica
  2. Check entries under cn=posix-ids,cn=dna,cn=ipa,cn=etc,$SUFFIX

Actual behavior

The entries with dnaPortNumber=389 are missing remote bind method and protocol attributes.

Expected behavior

All attributes have remote bind method and protocol configuration.


Metadata Update from @cheimes:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/5752

master:

  • 45d9a66faafbbe015af8d1d05d969a70f209c1a8 Fix update_dna_shared_config to wait for both entries
  • 5c92a718b38ff971cb25a3028d2e61a430d56406 Move constants, document timeout loop

ipa-4-8:

  • ccd9a2ef52a8efa19f97aa10c1b601b335986d2c Fix update_dna_shared_config to wait for both entries
  • 1afe43f26d39f323a1cea7360cf8416c2facf50f Move constants, document timeout loop

ipa-4-9:

  • 74889cf3ffa39e7988ebf7fc9c4480c3a0346a20 Fix update_dna_shared_config to wait for both entries
  • 7e9407d9d6c3d09263c70f805f360c6894a72262 Move constants, document timeout loop

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

Metadata