[Pki-devel] [PATCH] 0034 fix pkispawn for non-CA subsystems

Fraser Tweedale ftweedal at redhat.com
Wed Apr 22 02:27:59 UTC 2015


On Wed, Apr 22, 2015 at 11:59:13AM +1000, Fraser Tweedale wrote:
> Bug in code that chooses the profile subsystem (LDAP vs files)
> causes errors spawning non-CA instances. Fix attached.

ACKed by Ade.  Pushed to master (922e237)

> >From 922e237279fcf8ce9827f0e3cbed904758ad5123 Mon Sep 17 00:00:00 2001
> From: Fraser Tweedale <frase at frase.id.au>
> Date: Tue, 21 Apr 2015 21:07:39 -0400
> Subject: [PATCH] Only read pki_profiles_in_ldap when spawning CA instance
> 
> ---
>  base/server/python/pki/server/deployment/pkiparser.py | 9 ++++-----
>  1 file changed, 4 insertions(+), 5 deletions(-)
> 
> diff --git a/base/server/python/pki/server/deployment/pkiparser.py b/base/server/python/pki/server/deployment/pkiparser.py
> index e93f1717e09904d021fbdccdb3124b6a7fd8f6a1..7d82c18fc17f1037086df12a22c764231a1c50ff 100644
> --- a/base/server/python/pki/server/deployment/pkiparser.py
> +++ b/base/server/python/pki/server/deployment/pkiparser.py
> @@ -718,6 +718,10 @@ class PKIConfigParser:
>                              "ee",
>                              self.mdict['pki_subsystem'].lower(),
>                              "ProfileSelect.template")
> +                    if config.str2bool(self.mdict['pki_profiles_in_ldap']):
> +                        self.mdict['PKI_PROFILE_SUBSYSTEM_SLOT'] = 'LDAPProfileSubsystem'
> +                    else:
> +                        self.mdict['PKI_PROFILE_SUBSYSTEM_SLOT'] = 'ProfileSubsystem'
>                  elif self.mdict['pki_subsystem'] == "KRA":
>                      # '*.profile'
>                      self.mdict['pki_target_servercert_profile'] = \
> @@ -1231,11 +1235,6 @@ class PKIConfigParser:
>                      "pki-tomcatd" + "@" + \
>                      self.mdict['pki_instance_name'] + "." + "service"
>  
> -            if config.str2bool(self.mdict['pki_profiles_in_ldap']):
> -                self.mdict['PKI_PROFILE_SUBSYSTEM_SLOT'] = 'LDAPProfileSubsystem'
> -            else:
> -                self.mdict['PKI_PROFILE_SUBSYSTEM_SLOT'] = 'ProfileSubsystem'
> -
>          except OSError as exc:
>              config.pki_log.error(log.PKI_OSERROR_1, exc,
>                                   extra=config.PKI_INDENTATION_LEVEL_2)
> -- 
> 2.1.0
> 

> _______________________________________________
> Pki-devel mailing list
> Pki-devel at redhat.com
> https://www.redhat.com/mailman/listinfo/pki-devel




More information about the Pki-devel mailing list