IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

PKI installation on replica failing due to missing proxy conf

Browse Source 
Proxy configuration was not detected correctly. Both
ipa-pki-proxy.conf and ipa.conf need to be in place and httpd
restarted to be able to check it's status.

https://fedorahosted.org/freeipa/ticket/3964
This commit is contained in:
Martin Kosek 2013-10-09 22:33:20 +02:00
parent cb9331ebfc
commit dbfa7157cc
2 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
ipapython/platform/fedora16/service.py
View File

@ -143,7 +143,8 @@ class Fedora16CAService(Fedora16Service):
# Unfortunately, knownservices.httpd.is_installed() can return # Unfortunately, knownservices.httpd.is_installed() can return
# false positives, so check for existence of our configuration file. # false positives, so check for existence of our configuration file.
# TODO: Use a cleaner solution # TODO: Use a cleaner solution
if not os.path.exists('/etc/httpd/conf.d/ipa.conf'): if not (os.path.exists('/etc/httpd/conf.d/ipa.conf') and
os.path.exists('/etc/httpd/conf.d/ipa-pki-proxy.conf')):
root_logger.debug( root_logger.debug(
'The httpd proxy is not installed, skipping wait for CA') 'The httpd proxy is not installed, skipping wait for CA')
return return

4
ipaserver/install/cainstance.py
View File

@ -1679,8 +1679,10 @@ def install_replica_ca(config, master_ds_port, postinstall=False):
master_replication_port=master_ds_port, master_replication_port=master_ds_port,
subject_base=config.subject_base) subject_base=config.subject_base)
# Restart httpd since we changed it's config and added ipa-pki-proxy.conf
# Without the restart, CA service status check would fail due to missing
# proxy
if postinstall: if postinstall:
# Restart httpd since we changed its config
ipaservices.knownservices.httpd.restart() ipaservices.knownservices.httpd.restart()