freeipa/ipaserver/install
Fraser Tweedale 5136cd6e4b Avoid race condition caused by profile delete and recreate
When importing IPA-managed certificate profiles into Dogtag,
profiles with the same name (usually caIPAserviceCert) are removed,
then immediately recreated with the new profile data.  This causes a
race condition - Dogtag's LDAPProfileSystem profileChangeMonitor
thread could observe and process the deletion after the profile was
recreated, disappearing it again.

Update the profile instead of deleting and recreating it to avoid
this race condition.

Fixes: https://fedorahosted.org/freeipa/ticket/5269
Reviewed-By: Jan Cholasta <jcholast@redhat.com>
2015-11-23 11:05:49 +01:00
..
plugins topology: manage ca replication agreements 2015-10-15 14:24:33 +02:00
server cert renewal: make renewal of ipaCert atomic 2015-11-19 13:06:12 +01:00
__init__.py Remove __all__ specifications in ipaclient and ipaserver.install 2013-09-06 15:42:33 +02:00
adtrustinstance.py remove Kerberos authenticators when installing/uninstalling service instance 2015-11-11 15:39:42 +01:00
bindinstance.py remove Kerberos authenticators when installing/uninstalling service instance 2015-11-11 15:39:42 +01:00
ca.py Check early if a CA is already installed locally 2015-10-27 17:42:30 +01:00
cainstance.py Avoid race condition caused by profile delete and recreate 2015-11-23 11:05:49 +01:00
certs.py ipaplatform: Add HTTPD_USER to constants, and use it. 2015-11-04 13:12:12 +01:00
custodiainstance.py Upgrade: enable custodia service during upgrade 2015-11-10 10:41:23 +01:00
dns.py Remove unused constant NEW_MASTER_MARK from ipaserver.install.dns 2015-11-11 14:58:14 +01:00
dnskeysyncinstance.py remove Kerberos authenticators when installing/uninstalling service instance 2015-11-11 15:39:42 +01:00
dogtaginstance.py Allow to install the KRA on a promoted server 2015-10-22 17:53:14 +02:00
dsinstance.py remove Kerberos authenticators when installing/uninstalling service instance 2015-11-11 15:39:42 +01:00
httpinstance.py Drop configure.jar 2015-11-13 14:02:45 +01:00
installutils.py remove Kerberos authenticators when installing/uninstalling service instance 2015-11-11 15:39:42 +01:00
ipa_backup.py Use six.moves.configparser instead of ConfigParser 2015-10-07 10:27:20 +02:00
ipa_cacert_manage.py Handle binascii.Error from base64.b64decode() 2015-10-22 18:34:46 +02:00
ipa_kra_install.py KRA: fix check that CA is installed 2015-10-29 14:26:26 +01:00
ipa_ldap_updater.py Alias "unicode" to "str" under Python 3 2015-09-17 11:08:43 +02:00
ipa_otptoken_import.py Alias long to int under Python 3 2015-10-13 14:16:32 +02:00
ipa_replica_prepare.py Drop configure.jar 2015-11-13 14:02:45 +01:00
ipa_restore.py Use six.moves.configparser instead of ConfigParser 2015-10-07 10:27:20 +02:00
ipa_server_certinstall.py ipaplatform: Add HTTPD_USER to constants, and use it. 2015-11-04 13:12:12 +01:00
ipa_server_upgrade.py Upgrade: Do not show upgrade failed message when IPA is not installed 2015-07-08 12:58:50 +00:00
ipa_winsync_migrate.py winsync-migrate: Properly handle collisions in the names of external groups 2015-09-23 17:05:47 +02:00
kra.py Allow to install the KRA on a promoted server 2015-10-22 17:53:14 +02:00
krainstance.py suppress errors arising from adding existing LDAP entries during KRA install 2015-11-19 15:04:12 +01:00
krbinstance.py Implement replica promotion functionality 2015-10-15 14:24:33 +02:00
ldapupdate.py Handle binascii.Error from base64.b64decode() 2015-10-22 18:34:46 +02:00
memcacheinstance.py Use absolute imports 2015-08-12 18:17:23 +02:00
ntpinstance.py ipaplatform: Add NTPD_OPTS_VAR and NTPD_OPTS_QUOTE to constants 2015-11-04 13:12:12 +01:00
odsexporterinstance.py remove Kerberos authenticators when installing/uninstalling service instance 2015-11-11 15:39:42 +01:00
opendnssecinstance.py DNSSEC: remove sysrestore state after uninstall 2015-11-03 16:25:01 +01:00
otpdinstance.py Use absolute imports 2015-08-12 18:17:23 +02:00
replication.py Fix more bytes/unicode issues 2015-10-22 18:34:46 +02:00
schemaupdate.py Server Upgrade: fix traceback caused by cidict 2015-09-03 14:11:52 +02:00
service.py suppress errors arising from adding existing LDAP entries during KRA install 2015-11-19 15:04:12 +01:00
sysupgrade.py Modernize 'except' clauses 2015-08-12 18:17:23 +02:00
upgradeinstance.py Make offline LDIF modify more robust 2015-10-15 18:37:52 +02:00