[Freeipa-devel] [PATCH 031] RedHatCAService should wait for local Dogtag instance
Petr Spacek
pspacek at redhat.com
Fri Jul 1 08:48:57 UTC 2016
On 1.7.2016 10:42, Christian Heimes wrote:
> RedHatCAService.wait_until_running() uses dogtag.ca_status() to make a
> HTTP(s) request to Dogtag in order to check if /ca/admin/ca/getStatus
> returns OK. The ca_status() function defaults to api.env.ca_host as
> host.
>
> On a replica without CA ca_host is a remote host (e.g. master's
> FQDN). ipa-ca-install waits for master:8080 instead of replica:8080,
> which might be blocked by a firewall.
>
> https://fedorahosted.org/freeipa/ticket/6016
Interesting. How it happens that replica without CA is calling RedHatCAService?
Also, why replica should be waiting for CA if it is not installed?
I'm confused.
--
Petr^2 Spacek
More information about the Freeipa-devel
mailing list