[Pkg-openldap-devel] Bug#593965: slapd upgrade logic may mail on existing/working slapd.d/ configurations

[Matthijs Möhlmann]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08/22/2010 07:01 PM, Peter Marschall wrote:
> Package: slapd
> Version: 2.4.23-3pm1
> Severity: normal
> Tags: sid
> 
> Hi Matthijs & the openldap maintainers,
> 
> The logic for converting the configuration to a slapdd.d based one
> currently tests
> 	previous_version_older 2.4.23-3 || [ -f "${SLAPD_CONF}" ]
> I.e. when upgrading from a version before 2.4.23-3 it will trigger.
> 

Probably we need to change this to:
	previous_version_older 2.4.23-3 && [ -f "${SLAPD_CONF}" ]

In this case only versions older then 2.4.23-3 and still have a
/etc/ldap/slapd.conf will trigger an upgrade to slapd.d

> This makes the following
> 	mkdir /etc/ldap/slapd.d
> fail if the local system already uses slapd.d/ configuration.
> 
> I do not think it is a solution to change the mkdir to
> 	mkdir /etc/ldap/slapd.d  ||  true
> because I guess the "slapd -f ... -F ..." then fail.
> 
Correct.

> Unfortunately I do not have a working patch for the situation,
> especially as I am trying to achieve ome - maybe contradicting - goals:
> - convert to slapd.d/ on upgrade

I've tested this with the current svn and it seems ok, I'll let it in
svn one more day and will then upload it.

> - do not overwrite existing slapd.d/ when newer than slapd.conf

Can you give an example on this case how to achieve this ?

> - allow to keep a slapd.conf based config even after 2.4.23-3 ;-)
> Especially the last one will be tricky (maybe it needs to be restricted)
> 
As upstream moves away from a slapd.conf based config, why should we
hold on to it ?

> As soon as I have a more detailed idea I'll attach it to this bug.
> 

Regards,

Matthijs Mohlmann
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkx0J70ACgkQ2n1ROIkXqbCqmQCgjpI8pleSn9e/AdEtxcBUQZoB
dMMAoIG5cKcsm0/qkQVuKMrQjgpssyWW
=Dl4Z
-----END PGP SIGNATURE-----