On 7/15/21 2:56 PM, Tobias Ernstberger wrote:
Hello,
it is well known and documented, that the memberOf attribute can have
inconsistent states (e.g. by manipulating it directly).
There is also a Fix-Up Task to repair that.
Question: Is there also a way to report/list all current inconsistent
states, that the Fix-Up Task might repair?
Hello,
No it does not check if there are differences between old/new memberof
values. It just replace the old valueset with the new one.
Motivation for that is to evaluate the impact of the Fix-Up Task to
reduce/manage operational risks.
Possible action might be to evaluate manually for all reported issues
if they need to be cleaned up in the memberOf attribute, or added as
regular group membership to the group
Do you mean you would like an option to run the fixup task to report
invalid memberof setting but without doing any update ? Then later do
the manual fixup ?
best regards
thierry
Mit freundlichen Grüßen / Kind regards
*Tobias Ernstberger*
IT-Architect Identity and Access Management
IBM Security Expert Labs
+49 151 15138929
tobias.ernstberger(a)de.ibm.com
IBM *Security*
IBM Deutschland GmbH
Vorsitzender des Aufsichtsrats: Sebastian Krause
Geschäftsführung: Gregor Pillen (Vorsitzender), Agnes Heftberger,
Gabriele Schwarenthorer, Markus Koerner, Christian Noll, Nicole Reimer
Sitz der Gesellschaft: Ehningen / Registergericht: Amtsgericht
Stuttgart, HRB 14562 / WEEE-Reg.-Nr. DE 99369940
https://www.ibm.com/privacy/us/en/ <
https://www.ibm.com/privacy/us/en/>
_______________________________________________
389-users mailing list -- 389-users(a)lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave(a)lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproje...
Do not reply to spam on the list, report it:
https://pagure.io/fedora-infrastructure