upgrade: add missing suffix to http instance

During an upgrade, http.suffix is used to identify ldap entry when
configuring kdc proxy. When the suffix is missing, the script crashed
when enabling KDC proxy, because it used invalid DN.

Fixes https://pagure.io/freeipa/issue/6920

Reviewed-By: Martin Basti <mbasti@redhat.com>
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
This commit is contained in:
Tomas Krizek 2017-05-02 19:26:04 +02:00 committed by Martin Basti
parent 4b8ab77dd4
commit ebefb28177

View File

@ -1638,6 +1638,7 @@ def upgrade_configuration():
http = httpinstance.HTTPInstance(fstore)
http.fqdn = fqdn
http.realm = api.env.realm
http.suffix = ipautil.realm_to_suffix(api.env.realm)
http.configure_selinux_for_httpd()
http.change_mod_nss_port_from_http()