[Pki-devel] [PATCH] 230 - fix errors with krs-connector-remove

Ade Lee alee at redhat.com
Mon Sep 1 17:06:13 UTC 2014


Fix kra-connector-remove
    
    The code to remove the connector from the pki CLI was found to be broken
    because of invalid message type (partly due to void returns).
    
    On uninstall, we need to remove the kra-connector from all relevant CA's
    in the security domain.  The best way to do this is to keep kra-connector
    info in LDAP, so that only one call is needed.  Until that change has
    been made, we are adding a hack to remove the connector from all CA's
    in the secutrity domain (if it exists).
    
    Due to issues with proxy configurations, we will continue to use sslget
    and a url-encoded-form version of the servlet.
    
    In addition, it was found that when removing a KRA from a shared subsystem,
    the updateDomainXML servlet was erroneously returning failure when it
    was unsuccessful in removing a non-existent user from a group.
    
    Ticket 1113

Tested using ipa-kra-install --uinstall on both masters and replica
KRAs.

Please review,
Ade
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pki-vakwetu-0230-Fix-kra-connector-remove.patch
Type: text/x-patch
Size: 16219 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/pki-devel/attachments/20140901/ae625914/attachment.bin>


More information about the Pki-devel mailing list