On 8/6/21 9:33 AM, Simon Lees wrote:
On 8/6/21 5:28 AM, Carlos E. R. wrote:
On 05/08/2021 15.39, Philipp Wagner wrote:
On 05.08.21 08:38, Andreas Vögele wrote:
This change in OpenLDAP 2.5 is scary as it affects most users who run slapd:
"Due to database format changes between OpenLDAP 2.4 and OpenLDAP 2.5 it is mandatory for existing slapd-mdb(5) databases to be exported via an OpenLDAP 2.4 slapcat prior to upgrade. They must then be reloaded via an OpenLDAP 2.5 slapadd after the binaries are updated."
I think that OpenLDAP 2.4 cannot be replaced by version 2.5. There have to be packages for both versions. At least a statically linked slapcat from version 2.4 has to be provided.
Good point, but I'm not sure what the solution is. To widen the question a bit: What do we do in Tumbleweed generally in a case where an update requires manual intervention from the user? (In this case *before* the update is actually performed.)
1. Somehow notify the user before doing the update, and giving them a choice to not do the upgrade and e.g. pin the old version.
2. Buy us time by providing two versions of the same software. (I'd note that this solution isn't sustainable long-term, so we'll need to have the discussion about "what then" one way or the other.)
3. Try to come up with a automatic migration solution downstream (in this case, dump the db and try to re-import it).
4. Simply do the upgrade and assume users will somehow deal with it (e.g. under the assumption that "this is Tumbleweed").
5. Do not provide 2.5 as update of 2.4.
Forces manual action to install 2.5 when 2.4 dissapears, but for a limited time both versions should be available. Somehow tell users in an update of 2.4 to 2.4 something that it is end of the road, read some link.
Just some out of the box thinking, I have no idea if it is feasible :-)
This is practically the same as 2, the question is how long can we sustain both if at all.
At the end of the day whatever solution is chosen someone has to do the work and take responsibility for the custom migration tools. So the most important question is: Who? Although I'm regularly updating the openldap2 package I won't work on this because I use custom OpenLDAP packages instead anyway and I don't need such migration scripts myself. Ciao, Michael.