[Pkg-openldap-devel] RFR: Preliminary patch for cn=config support: new installs

[Mathias Gug]

Hi,

I've attached a new patch that supports upgrade. All the issues
highlighted by Steve haven't been addressed yet.

On Mon, Jul 14, 2008 at 07:23:32PM +0100, Steve Langasek wrote:
> === added file 'debian/slapd.init.ldif'
> --- debian/slapd.init.ldif	1970-01-01 00:00:00 +0000
> +++ debian/slapd.init.ldif	2008-07-11 19:06:51 +0000
> 
> Why this particular file name?  I don't understand the significance of
> "slapd.init.ldif".

This ldif is use to create the initial configuration of slapd.d/.

> +# Config db settings
> +dn: olcDatabase=config,cn=config
> +objectClass: olcDatabaseConfig
> +olcDatabase: config
> +olcRootDN: cn=admin,cn=config
> + at olcRootPW@
> 
> why not olcRootPW: @olcRootPW@ ? :)

To make sure that the template cannot be loaded without setting a
password.

> +		sed <"$conf_template" \
> +			-e "s/@olcRootPW@/olcRootPW: $adminpass/g" \
> +			-e "s/@backend@/$backend/g" \
> +			-e "s/@Backend@/$backend1/g" \
> +			-e "s/@SUFFIX@/$basedn/g" \
> +			-e "s/@ADMIN@/cn=admin,$basedn/g" \
> +			| noisy_slapadd -F ${conf_new} -b "cn=config"
> 
> Does noisy_slapadd provide an advantage here, vs. using
> "capture_diagnostics slapadd" and pointing the user to the source LDIF file
> in case of an error?

noisy_slapadd supports piping the ldif in it. But it could probably be
changed.

> Overall, it looks like a good start, but I'd like to see upgrade support
> included as well before committing this to the packaging trunk.


-- 
Mathias Gug
Ubuntu Developer  http://www.ubuntu.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: cnconfig-migration_208.patch
Type: text/x-diff
Size: 24400 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/pkg-openldap-devel/attachments/20080717/01d33a73/attachment-0001.patch