IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2024-12-27 09:21:59 -06:00
Code Issues Packages Projects Releases Wiki Activity

disconnect ldap2 backend after adding default CA ACL profiles

Browse Source 
ensure_default_caacl() was leaking open api.Backend.ldap2 connection which
could crash server/replica installation at later stages. This patch ensures
that after checking default CA ACL profiles the backend is disconnected.

https://fedorahosted.org/freeipa/ticket/5459

Reviewed-By: Tomas Babej <tbabej@redhat.com>
This commit is contained in:
Martin Babinsky 2015-11-24 14:43:10 +01:00 committed by Tomas Babej
parent 620036d26e
commit 341406d165
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
ipaserver/install/cainstance.py
View File

@ -2028,6 +2028,9 @@ def ensure_default_caacl():
api.Command.caacl_add_profile(u'hosts_services_caIPAserviceCert', api.Command.caacl_add_profile(u'hosts_services_caIPAserviceCert',
certprofile=(u'caIPAserviceCert',)) certprofile=(u'caIPAserviceCert',))
if api.Backend.ldap2.isconnected():
api.Backend.ldap2.disconnect()
if __name__ == "__main__": if __name__ == "__main__":
standard_logging_setup("install.log") standard_logging_setup("install.log")