On 6 Jun 2022, at 12:12, tdarby@email.arizona.edu wrote:
Thanks! I've succeeded in getting all my configs scripted with Python, except for setting the nsslapd-db-locks attribute:
standalone.conig,set (fail) dse_ldif.replace (fail) dsconf works!
What's the magic here? Is there a Pythonic way to do this?
The magic is likely that dse.ldif, if changed while the server is running is will automatically revert your changes from "in memory". This is because 389-ds can "live" update it's config.
So dsconf is using the ldap-facing live update mechanism, which means ns-slapd writes the changes down to dse.ldif. That's probably what you are encountering.
Also, I'm surpsised at how much I had to resort to Python LDAP to get things done. I kinda thought that lib389 would do most of it?
What did you find was missing?
-- Sincerely,
William Brown
Senior Software Engineer, Identity and Access Management SUSE Labs, Australia