Red Hat Bugzilla – Bug 887855
RootDN Access Control plugin is missing after upgrade from RHEL63 to RHEL64
Last modified: 2013-02-21 03:21:47 EST
Description of problem: To limit bind of Directory Manager (account specified under nsslapd-rootdn), new plugin cn=RootDN Access Control,cn=plugins,cn=config was introduced. This plugin is missing in directory server after upgrade from RHEL63, but is present in fresh install. Version-Release number of selected component (if applicable): RHEL64 with 389-ds-base-1.2.11.15-7.el6 Steps to Reproduce: 1. Install 389-ds-base-1.2.10.2-20.el6_3 on RHEL63 2. Upgrade to RHEL64 and 389-ds-base-1.2.11.15-7.el6 3. [jrusnack@dstet slapd-dstet]$ ldapsearch -D "cn=directory manager" -w Secret123 -h localhost -p 22222 -b "cn=RootDN Access Control,cn=plugins,cn=config" # extended LDIF # # LDAPv3 # base <cn=RootDN Access Control,cn=plugins,cn=config> with scope subtree # filter: (objectclass=*) # requesting: ALL # # search result search: 2 result: 0 Success [jrusnack@dstet slapd-dstet]$ rpm -qa | grep 389-ds-base 389-ds-base-libs-1.2.11.15-7.el6.i686 Actual results: RootDN Access Control plugin is missing. Additional info: https://fedorahosted.org/389/ticket/110
Upstream ticket: https://fedorahosted.org/389/ticket/541
For 6.4: commit d324d6782f74b7e28f7a457428fe43c77b39944c Author: Mark Reynolds <mreynolds@redhat.com> Date: Tue Dec 18 16:04:01 2012 -0500 Ticket 541 - need to set plugin as off in ldif template commit 9a7fa90eed49f47aa0bc64c496815fececb437f2 Author: Mark Reynolds <mreynolds@redhat.com> Date: Tue Dec 18 15:58:32 2012 -0500 Ticket 541 - RootDN Access Control plugin is missing after upgrade
Now after upgrade: [jrusnack@dstet ~]$ ldapsearch -D "cn=directory manager " -w Secret123 -h localhost -p 22222 -LLL -b "cn=RootDN Access Control,cn=plugins,cn=config" dn: cn=RootDN Access Control,cn=plugins,cn=config objectClass: top objectClass: nsSlapdPlugin objectClass: extensibleObject cn: RootDN Access Control nsslapd-pluginPath: librootdn-access-plugin.so nsslapd-pluginInitfunc: rootdn_init nsslapd-pluginType: internalpreoperation nsslapd-pluginEnabled: off nsslapd-plugin-depends-on-type: database nsslapd-pluginId: none nsslapd-pluginVersion: none nsslapd-pluginVendor: none nsslapd-pluginDescription: none [jrusnack@dstet ~]$ rpm -qa | grep 389-ds-base 389-ds-base-1.2.11.15-8.el6.i686 389-ds-base-libs-1.2.11.15-8.el6.i686 Verified.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHSA-2013-0503.html