Fixing how sssd.conf is updated when promoting a client to replica

When promoting a client to a replica we have to change sssd.conf,
deleting _srv_ part from 'ipa_server' property and setting
'ipa_server_mode' to true.

Previously, the wrong domain could be updated since the ipa_domain
variable was not being used properly.

https://pagure.io/freeipa/issue/7127

Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
This commit is contained in:
Felipe Volpone 2017-09-11 14:22:22 -03:00 committed by Stanislav Laznicka
parent d88718cadc
commit 05acd0965f
2 changed files with 16 additions and 15 deletions

View File

@ -434,20 +434,17 @@ def promote_sssd(host_name):
sssdconfig.import_config()
domains = sssdconfig.list_active_domains()
ipa_domain = None
for name in domains:
domain = sssdconfig.get_domain(name)
try:
hostname = domain.get_option('ipa_hostname')
if hostname == host_name:
ipa_domain = domain
break
except SSSDConfig.NoOptionError:
continue
if ipa_domain is None:
raise RuntimeError("Couldn't find IPA domain in sssd.conf")
else:
raise RuntimeError("Couldn't find IPA domain in sssd.conf")
domain.set_option('ipa_server', host_name)
domain.set_option('ipa_server_mode', True)
sssdconfig.save_domain(domain)

View File

@ -1863,11 +1863,15 @@ def upgrade_configuration():
cainstance.ensure_ipa_authority_entry()
set_sssd_domain_option('ipa_server_mode', 'True')
set_sssd_domain_option('ipa_server', api.env.host)
sssdconfig = SSSDConfig.SSSDConfig()
sssdconfig.import_config()
sssd_enable_service(sssdconfig, 'ifp')
sssd = services.service('sssd', api)
sssd.restart()
krb = krbinstance.KrbInstance(fstore)
krb.fqdn = fqdn
krb.realm = api.env.realm