[Pki-devel] [PATCH] 230 - fix errors with krs-connector-remove

Ade Lee alee at redhat.com
Tue Sep 2 19:48:56 UTC 2014


Acked by Endi.  Pushed to master.

On Mon, 2014-09-01 at 13:06 -0400, Ade Lee wrote:
> Fix kra-connector-remove
>     
>     The code to remove the connector from the pki CLI was found to be broken
>     because of invalid message type (partly due to void returns).
>     
>     On uninstall, we need to remove the kra-connector from all relevant CA's
>     in the security domain.  The best way to do this is to keep kra-connector
>     info in LDAP, so that only one call is needed.  Until that change has
>     been made, we are adding a hack to remove the connector from all CA's
>     in the secutrity domain (if it exists).
>     
>     Due to issues with proxy configurations, we will continue to use sslget
>     and a url-encoded-form version of the servlet.
>     
>     In addition, it was found that when removing a KRA from a shared subsystem,
>     the updateDomainXML servlet was erroneously returning failure when it
>     was unsuccessful in removing a non-existent user from a group.
>     
>     Ticket 1113
> 
> Tested using ipa-kra-install --uinstall on both masters and replica
> KRAs.
> 
> Please review,
> Ade





More information about the Pki-devel mailing list