Created attachment 489440 [details]
0001-Bug-692937-Replica-install-fails-after-step-for-enab.patch

To ssh://git.fedorahosted.org/git/389/ds.git
   bb02e98..27ff25d  master -> master
commit 27ff25d8d928dc788b56ee614535f91dcf5f7f6f
Author: Rich Megginson <rmeggins>
Date:   Fri Apr 1 12:44:23 2011 -0600
To ssh://git.fedorahosted.org/git/389/ds.git
   428efff..de41307  389-ds-base-1.2.8 -> 389-ds-base-1.2.8
commit de4130733cfe32d29f5e1c60d22a067346c55a53
Author: Rich Megginson <rmeggins>
Date:   Fri Apr 1 12:44:23 2011 -0600

    Reviewed by: nhosoi (Thanks!)
    Branch: master
    Fix Description: Allow the deletion of the nsds5replicabinddn and
    nsds5replicacredentials attributes from the replication agreement.  These
    are not needed for SASL/EXTERNAL or SASL/GSSAPI.  NOTE: the agreement code
    will not warn that nsds5replicabinddn and nsds5replicacredentials are needed
    for simple and other bind methods.  It is the responsibility of the user
    to make sure these are specified.
    If the modify code executed in such a way that the transportinfo was set
    before bindmethod, the code would report an error that ldaps or tls cannot
    be used with SASL/GSSAPI.  There is no clean way to check to see if the
    state of the agreement is consistent after applying all mods, so we just
    remove this check.  With recent versions of the server, you can mix
    ssl/tls with sasl/gssapi.
    Platforms tested: RHEL6 x86_64
    Flag Day: no
    Doc impact: no

Marking bug Verified.  Original bug (this is a clone) was verified.