[Freeipa-devel] [PATCH 0049] Fix host principal password required in ipa-ca-install

[Stanislav Laznicka]

On 06/23/2016 08:09 AM, Jan Cholasta wrote:
> On 22.6.2016 16:22, Stanislav Laznicka wrote:
>> Hello,
>>
>> Please see the patch attached that fixes the issue from
>> https://fedorahosted.org/freeipa/ticket/5965. The patch took me quite a
>> while to create as I thought something was wrong with the SshExec class
>> which actually was where the password was required.
>
> "The nss_db variable didn't go through the proper initialization"
>
> You are going to have to be more specific, because the variable is 
> properly initialized right here:
>
>                 with certdb.NSSDatabase(nss_dir) as nss_db:
>
> And the nss_db.secdir attribute used in the api.bootstrap() call is 
> properly initialized in NSSDatabase():
>
>     def __init__(self, nssdir=None):
>         if nssdir is None:
>             self.secdir = tempfile.mkdtemp()
>             self._is_temporary = True
>         else:
>             self.secdir = nssdir
>             self._is_temporary = False
>
You're right, the commit message was rather generic. Hopefully this new 
one will be better.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-slaznick-0049-2-Fix-to-ipa-ca-install-asking-for-host-principal-pass.patch
Type: text/x-patch
Size: 1661 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20160623/acd1fca1/attachment.bin>