Florence Blanc-Renaud 2f902efd0e ipa-ods-enforcer: stop must also stop the socket ...

ipa-ods-enforcer is a socket-activated service. In order to fully stop
the service, IPA needs to call
systemctl stop ipa-ods-enforcer.service ipa-ods-enforcer.socket
otherwise the socket remains active (listening) and can restart the
service.

A consequence of the issue is the backup / uninstall / restore
scenario that is failing to sign the zones. The uninstaller removes
the socket /run/opendnssec/engine.sock but leaves the ipa-ods-enforcer.socket
active. A subsequent restore or install will not re-create the socket.

Fixes: https://pagure.io/freeipa/issue/9613
Signed-off-by: Florence Blanc-Renaud <flo@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>

2024-07-08 15:26:24 +02:00

..

__init__.py

ipaplatform: Create separate module for platform files

2014-06-16 19:48:17 +02:00

constants.py

ipa-client-install: enable SELinux for SSSD

2023-09-11 09:24:31 +02:00

paths.py

ipatests: Tests for ipa-ipa migration tool

2024-07-08 15:21:04 +02:00

services.py

ipa-ods-enforcer: stop must also stop the socket

2024-07-08 15:26:24 +02:00

tasks.py

Clean up more files and directories created by the installer(s)

2024-06-26 13:30:48 +02:00