[PATCH] Fix migration script for pre-0.5 local domains

[Jakub Hrozek]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Configuration files before 0.5.0 did not enforce provider= in local
domains it did special-case by domain name (LOCAL). Our script was
relying on provider= value, this patch adds the special-casing in case
the domain was called LOCAL.

Fixes: RHBZ #530949
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAkrljs8ACgkQHsardTLnvCWpqQCfSF6ZADJ6qxh5T+8JhBcFwL54
> 9YMAoJY3siDnYfQ/soaeqOfFkKmQsZBO
> =Dda7
> -----END PGP SIGNATURE-----

[Stephen Gallagher]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 10/26/2009 07:58 AM, Jakub Hrozek wrote:
>  Configuration files before 0.5.0 did not enforce provider= in local
>  domains it did special-case by domain name (LOCAL). Our script was
>  relying on provider= value, this patch adds the special-casing in case
>  the domain was called LOCAL.
>  
>  Fixes: RHBZ #530949 
Nack.

The approach looks sound, but I think you want to check that old_domsec
== 'domains/LOCAL' rather than checking the new_domsec ==
'domain/LOCAL'. I'm aware that they should both work, but old_domsec
seems more correct.

_______________________________________________
sssd-devel mailing list
sssd-devel(a)lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/sssd-devel


- -- 
Stephen Gallagher
RHCE 804006346421761

Looking to carve out IT costs?
www.redhat.com/carveoutcosts/
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAkrlkbcACgkQeiVVYja6o6OjsQCeLsE4c4aOn+9MxGVj/nehBXjN
> 6GYAnRdLesi8gzi+fFAc6SfE4piWPSki
> =jDie
> -----END PGP SIGNATURE-----

[Jakub Hrozek]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 10/26/2009 01:10 PM, Stephen Gallagher wrote:
>  On 10/26/2009 07:58 AM, Jakub Hrozek wrote:
> > Configuration files before 0.5.0 did not enforce provider= in local
> > domains it did special-case by domain name (LOCAL). Our script was
> > relying on provider= value, this patch adds the special-casing in case
> > the domain was called LOCAL.
>  
> > Fixes: RHBZ #530949
>  
>  Nack.
>  
>  The approach looks sound, but I think you want to check that old_domsec
>  == 'domains/LOCAL' rather than checking the new_domsec ==
>  'domain/LOCAL'. I'm aware that they should both work, but old_domsec
>  seems more correct.
>   
OK, new patch attached.
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAkrlkyMACgkQHsardTLnvCUbogCgxR5wfOiXGbZT/JSiRzAXT6ws
> jt0AoOtunVSS9CmsMzMVgIss3evmYQG/
> =K0Qy
> -----END PGP SIGNATURE-----

[Stephen Gallagher]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 10/26/2009 08:16 AM, Jakub Hrozek wrote:
>  On 10/26/2009 01:10 PM, Stephen Gallagher wrote:
> > On 10/26/2009 07:58 AM, Jakub Hrozek wrote:
> >> Configuration files before 0.5.0 did not enforce provider= in local
> >> domains it did special-case by domain name (LOCAL). Our script was
> >> relying on provider= value, this patch adds the special-casing in case
> >> the domain was called LOCAL.
>  
> >> Fixes: RHBZ #530949
>  
> > Nack.
>  
> > The approach looks sound, but I think you want to check that old_domsec
> > == 'domains/LOCAL' rather than checking the new_domsec ==
> > 'domain/LOCAL'. I'm aware that they should both work, but old_domsec
> > seems more correct.
>  
>  
>  OK, new patch attached. 
Ack and pushed to master.

_______________________________________________
sssd-devel mailing list
sssd-devel(a)lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/sssd-devel


- -- 
Stephen Gallagher
RHCE 804006346421761

Looking to carve out IT costs?
www.redhat.com/carveoutcosts/
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAkrllFUACgkQeiVVYja6o6P8dgCgkJHQZb5gj5PwNdSq+Yz6gk0b
> jRgAn1vsR+clKNjcCaAv+2+w5ibgICjE
> =GWNo
> -----END PGP SIGNATURE-----