[Freeipa-devel] [PATCH] 1072 enable transaction support

[Rob Crittenden]

Martin Kosek wrote:
> On 11/20/2012 04:27 PM, Nalin Dahyabhai wrote:
>> On Tue, Nov 20, 2012 at 02:08:04PM +0100, Martin Kosek wrote:
>>> 4) nsslapd-pluginbetxn is not set for schema compatibility plugin after upgrade:
>>>
>>> # Schema Compatibility, plugins, config
>>> dn: cn=Schema Compatibility,cn=plugins,cn=config
>>> nsslapd-pluginId: schema-compat-plugin
>>> cn: Schema Compatibility
>>> objectClass: top
>>> objectClass: nsSlapdPlugin
>>> objectClass: extensibleObject
>>> nsslapd-pluginDescription: Schema Compatibility Plugin
>>> nsslapd-pluginEnabled: on
>>> nsslapd-pluginPath: /usr/lib64/dirsrv/plugins/schemacompat-plugin.so
>>> nsslapd-pluginVersion: 0.44 (betxn support available and enabled by default)
>>> nsslapd-pluginVendor: redhat.com
>>> nsslapd-pluginType: object
>>> nsslapd-pluginInitfunc: schema_compat_plugin_init
>>>
>>> This is supposed to be enabled by default, judging by nsslapd-pluginVersion
>>> description, but this may create an inconsistency between new installs and
>>> upgraded IPA servers.
>>>
>>> The same issue applies to IPA server with NIS plugin enabled.
>>
>> Which version of IPA is it that starts explicitly configuring
>> "nsslapd-pluginbetxn" values for plugins?
>
> We explicitly started to set it to off in
> ea4f60b15a2743eb61f27ccd33d7bed17552eade, i.e. FreeIPA 3.0.x in F18. The plan
> is to set it to on with Rob's patch 1072 in FreeIPA 3.1.
>
>>
>> For Fedora, at least, are there cases where we're going from a version
>> that didn't configure that setting to a version that does configure it,
>> as an update within a single release?  If not, I can make the default
>> change depending on which release we're building for, and we'll be fine.
>> If that sort of upgrade is expected, though, the package will probably
>> need to start conflicting with versions of IPA that don't configure
>> "nsslapd-pluginbetxn" one way or the other, because there's no default
>> value that's guaranteed to be safe.
>>
>> Nalin
>>
>
> Such update may make it more bulletproof. Bug I think that we should be OK as
> long as the default betxn support is enabled in Fedora 18 or later (which it
> is) because there should be no FreeIPA 2.x release (nsslapd-pluginbetxn not
> set) there.
>
> Martin
>

I had intended to always enable it with this patch (but I screwed it up 
somehow). I'm fine having this as an IPA responsibility. If you want to 
make it the default in slapi-nis too that would be fine, and is probably 
a good idea since transactions are enabled by default in 1.3, but I want 
to be explicit in IPA.

rob