On 05/08/2021 15.39, Philipp Wagner wrote:
Hi Andreas,
On 05.08.21 08:38, Andreas Vögele wrote:
This change in OpenLDAP 2.5 is scary as it affects most users who run slapd:
"Due to database format changes between OpenLDAP 2.4 and OpenLDAP 2.5 it is mandatory for existing slapd-mdb(5) databases to be exported via an OpenLDAP 2.4 slapcat prior to upgrade. They must then be reloaded via an OpenLDAP 2.5 slapadd after the binaries are updated."
I think that OpenLDAP 2.4 cannot be replaced by version 2.5. There have to be packages for both versions. At least a statically linked slapcat from version 2.4 has to be provided.
Good point, but I'm not sure what the solution is. To widen the question a bit: What do we do in Tumbleweed generally in a case where an update requires manual intervention from the user? (In this case *before* the update is actually performed.)
1. Somehow notify the user before doing the update, and giving them a choice to not do the upgrade and e.g. pin the old version.
2. Buy us time by providing two versions of the same software. (I'd note that this solution isn't sustainable long-term, so we'll need to have the discussion about "what then" one way or the other.)
3. Try to come up with a automatic migration solution downstream (in this case, dump the db and try to re-import it).
4. Simply do the upgrade and assume users will somehow deal with it (e.g. under the assumption that "this is Tumbleweed").
5. Do not provide 2.5 as update of 2.4. Forces manual action to install 2.5 when 2.4 dissapears, but for a limited time both versions should be available. Somehow tell users in an update of 2.4 to 2.4 something that it is end of the road, read some link. Just some out of the box thinking, I have no idea if it is feasible :-) -- Cheers / Saludos, Carlos E. R. (from oS Leap 15.2 x86_64 (Minas Tirith))