IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-01-27 00:26:33 -06:00
Code Issues Packages Projects Releases Wiki Activity
3f9e23f125
freeipa/ipaserver/install
History
Christian Heimes 3f9e23f125 Add ExecStartPost hook to wait for Dogtag PKI 
Dogtag PKI typically takes around 10 seconds to start and respond to
requests. Dogtag uses a simple systemd service, which means systemd is
unable to detect when Dogtag is ready. Commands like ``systemctl start``
and ``systemctl restart`` don't block and wait until the CA is up. There
have been various workarounds in Dogtag and IPA.

Systemd has an ExecStartPost hook to run programs after the main service
is started. The post hook blocks systemctl start and restart until all
post hooks report ready, too. The new ipa-pki-wait-running script polls
on port 8080 and waits until the CA subsystem returns ``running``.

Related: https://pagure.io/freeipa/issue/7916
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
2019-04-24 09:09:28 +02:00
..
plugins upgrade: upgrade existing trust agreements to new layout 2019-03-28 14:08:19 +01:00
server Move DS's Kerberos env vars to unit file 2019-04-02 19:35:38 +02:00
__init__.py Remove __all__ specifications in ipaclient and ipaserver.install 2013-09-06 15:42:33 +02:00
adtrust.py ipaserver.install.adtrust: fix CID 323644 2018-11-07 16:37:18 +01:00
adtrustinstance.py Move realm_to_serverid/ldap_uri to ipaldap 2019-02-05 08:39:13 -05:00
bindinstance.py Use Network Manager to configure resolv.conf 2019-04-16 10:45:59 +02:00
ca.py Add pki.ini override option 2019-04-10 13:43:23 +02:00
cainstance.py Add ExecStartPost hook to wait for Dogtag PKI 2019-04-24 09:09:28 +02:00
certs.py Py3: Replace six.moves imports 2018-10-05 12:06:19 +02:00
conncheck.py install: introduce installer class hierarchy 2016-11-11 12:17:25 +01:00
custodiainstance.py Move realm_to_serverid/ldap_uri to ipaldap 2019-02-05 08:39:13 -05:00
dns.py Use api.env.container_masters 2019-03-28 00:21:00 +01:00
dnskeysyncinstance.py Delay enabling services until end of installer 2018-07-06 13:26:43 +02:00
dogtag.py Verify pki ini override early 2019-04-10 13:43:23 +02:00
dogtaginstance.py Verify pki ini override early 2019-04-10 13:43:23 +02:00
dsinstance.py Remove DsInstance.request_service_keytab as it is not needed anymore 2019-04-07 12:26:09 +02:00
httpinstance.py Replace nss.conf with zero-length file instead of removing 2018-12-14 09:15:42 +01:00
installutils.py Verify external CA's basic constraint pathlen 2019-04-04 10:05:10 +02:00
ipa_backup.py Add ExecStartPost hook to wait for Dogtag PKI 2019-04-24 09:09:28 +02:00
ipa_cacert_manage.py Add support for multiple certificates/formats to ipa-cacert-manage 2018-11-13 10:44:14 +01:00
ipa_crlgen_manage.py CRL generation master: new utility to enable|disable 2019-03-14 09:39:55 +01:00
ipa_kra_install.py Add pki.ini override option 2019-04-10 13:43:23 +02:00
ipa_ldap_updater.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
ipa_otptoken_import.py Py3: Remove subclassing from object 2018-09-27 11:49:04 +02:00
ipa_pkinit_manage.py PKINIT: fix ipa-pkinit-manage enable|disable 2018-12-05 11:06:21 +01:00
ipa_replica_install.py Enable replica install info logging to match ipa-server-install 2018-11-01 13:08:58 +01:00
ipa_restore.py Add tasks.systemd_daemon_reload() 2019-04-02 19:35:38 +02:00
ipa_server_certinstall.py Move realm_to_serverid/ldap_uri to ipaldap 2019-02-05 08:39:13 -05:00
ipa_server_install.py Improve console logging for ipa-server-install 2018-06-20 08:38:03 +02:00
ipa_server_upgrade.py ipa commands: print 'IPA is not configured' when ipa is not setup 2018-08-23 12:08:45 +02:00
ipa_winsync_migrate.py ipa commands: print 'IPA is not configured' when ipa is not setup 2018-08-23 12:08:45 +02:00
kra.py Add pki.ini override option 2019-04-10 13:43:23 +02:00
krainstance.py ipaserver/install/krainstance.py: chown after write 2019-04-11 10:04:00 +02:00
krbinstance.py Move DS's Kerberos env vars to unit file 2019-04-02 19:35:38 +02:00
ldapupdate.py Use new LDAPClient constructors 2019-02-05 08:39:13 -05:00
odsexporterinstance.py Delay enabling services until end of installer 2018-07-06 13:26:43 +02:00
opendnssecinstance.py Unify and simplify LDAP service discovery 2018-11-21 08:57:08 +01:00
otpdinstance.py Enable pylint missing-final-newline check 2015-12-23 07:59:22 +01:00
replication.py Fix wrong evaluation of attributes in check_repl_update 2019-04-15 12:05:22 +02:00
schemaupdate.py logging: do not use ipa_log_manager to create module-level loggers 2017-07-14 15:55:59 +02:00
service.py ipa-setup-kra: fix python2 parameter 2019-04-01 12:55:46 +02:00
sysupgrade.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
upgradeinstance.py Move realm_to_serverid/ldap_uri to ipaldap 2019-02-05 08:39:13 -05:00