[Freeipa-devel] [PATCH 0053-0056] DNSSEC: Fix deadlocks & export to LDAP

[Martin Basti]

On 09/03/2015 05:44 PM, Martin Basti wrote:
>
>
> On 09/03/2015 10:40 AM, Oleg Fayans wrote:
>> NACK from me.
>>
>> 2 out of 5 tests still fail with assertion errors:
>> https://paste.fedoraproject.org/262926/44126948/
>>
>> Although, I am not sure these failures are caused by the same very 
>> problem.
>>
>> On 08/31/2015 06:50 PM, Petr Spacek wrote:
>>> Hello,
>>>
>>> Attached patch set should fix the deadlock you discovered + few more 
>>> issues I
>>> spotted when testing the original patch.
>>>
>>> Known problems (more patches needed):
>>> - /etc/opendnssec/zonelist.xml should be restored during server 
>>> uninstall
>>> - ccache for ipa-ods-exporter should be removed during server uninstall
>>> - timestamps in .private key files do not reflect (?) current key 
>>> state in
>>> OpenDNSSEC database (I will look into this tomorrow.)
>>>
>>>
>>>
>>
>
> Actually, I did testing and these patches fixing the deadlock.
>
> ACK from me.
>
> You may hit another issue, which is reproducible only by DNSSEC CI test:
> named is not able to read keys (we don't know why, because keys are 
> ready and readable)
> Workaround is just to restart named, and everything will work.
>
Pushed to:
master: e84006117637832f63904edeb45b7296151be6ad
ipa-4-2: 73058caa625e5e966beff9122cf235cb45d6b0bc