A bug is being addressed in 389 ds to allow for the transmission of memberof data during replication due to the potentially high resource impact of having to recompute all of a production directory's memberof referential integrity.
The installation scripts for FreeIPA replica's need to be modified in conjunction with this effort.
Depends on this being in 389ds first: https://bugzilla.redhat.com/show_bug.cgi?id=739176
The above bug has been marked duplicate of the following https://bugzilla.redhat.com/show_bug.cgi?id=739172
attachment freeipa-jraquino-0040-Adjust-replica-installation-to-omit-processing-memberof.patch
The attached patch has been tested with the initial patch for bz 739176. Initial results are functionally clean. Replica install with full production data takes minutes instead of days now. Patch needs to be tested AFTER the fix for 389 ds is available.
Need to add code to deal with old masters. Detect if the new attribute cannot be added and revert to old code path in that case.
Simo has concerns about memberOf not being executed in a transaction and it transferring an entry with 'member' but not the corresponding 'memberof' changes as memberof wasn't finished at the moment the total replication was started.
Pushing to 3.0
Moving the ticket to the next month iteration.
master: 714b0d1
Metadata Update from @jraquino: - Issue assigned to simo - Issue set to the milestone: FreeIPA 3.0 Core Effort - 2011/11
Login to comment on this ticket.