[Freeipa-devel] [PATCH] 177 Add connection failure recovery to IPAdmin

[Martin Kosek]

On Thu, 2011-12-08 at 14:36 +0200, Alexander Bokovoy wrote:
> On Thu, 08 Dec 2011, Martin Kosek wrote:
> > Recover from connection failures in IPAdmin LDAP bind functions and
> > rather try reconnect in scope of a given timeout instead of giving
> > up after the first failed connection.
> > 
> > The recovery fixes ipa-ldap-updater on F-16 which always failed
> > because of a missing dirsrv socket.
> > 
> > https://fedorahosted.org/freeipa/ticket/2175
> ACK. 
> 
> I should have looked at a generalized fix when I was doing systemd 
> work...
> 
> Thanks!
> 

I found out that this issue is present both in master and ipa-2-1
branches. Pushed to both.

We have to be cautious for this bug as it affects all freeipa updates in
F-16. End user can easily overlook this failure as no error is printed
to package update log and user would have to investigate ipaupgrade.log
to detect this malfunction.

A workaround for current F-16 users would be running _online_ dirsrv
update:

# ipa-ldap-updater --ldapi

Martin