[Freeipa-devel] [PATCH] 239 Tolerate UDP port failures in conncheck

[Rob Crittenden]

Martin Kosek wrote:
> UDP port checks in ipa-replica-conncheck are too strict. The entire
> conncheck fails when UDP ports cannot be verified as open. However,
> UDP protocol is unrealiable by its nature and the port can also not
> be checked if there is an application already bound to it. This can
> happen for example when ipa-replica-conncheck is run as a part of
> ipa-ca-install and the replica services are thus already running.
>
> This patch changes the behavior of UDP port checks. The conncheck
> script now rather reports a warning that UDP port cannot be verified
> but does not fail the entire test.
>
> https://fedorahosted.org/freeipa/ticket/2514


ACK, pushed to master and ipa-2-2