URL: https://github.com/freeipa/freeipa/pull/1550
Author: tiran
 Title: #1550: [Backport][ipa-4-6] Restart named-pkcs11 after KRA installation
Action: opened

PR body:
This PR was opened automatically because PR #1522 was pushed to master and 
backport to ipa-4-6 is required.

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1550/head:pr1550
git checkout pr1550
From 63640932235f72ed09bb770c7a8d95863ce9311c Mon Sep 17 00:00:00 2001
From: Christian Heimes <chei...@redhat.com>
Date: Mon, 5 Feb 2018 15:27:44 +0100
Subject: [PATCH] Restart named-pkcs11 after KRA installation

KRA installer restarts 389-DS, which disrupts named-pkcs11
bind-dyndb-ldap for a short while. Restart named-pkcs11 to fix DNS

Fixes: https://pagure.io/freeipa/issue/5813
Signed-off-by: Christian Heimes <chei...@redhat.com>
 ipaserver/install/kra.py | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/ipaserver/install/kra.py b/ipaserver/install/kra.py
index 77fd11b9ea..1e3ab60c45 100644
--- a/ipaserver/install/kra.py
+++ b/ipaserver/install/kra.py
@@ -129,6 +129,11 @@ def install(api, replica_config, options):
     # Restart apache for new proxy config file
+    # Restarted named-pkcs11 to restore bind-dyndb-ldap operation, see
+    # https://pagure.io/freeipa/issue/5813
+    named = services.knownservices.named  # alias for named-pkcs11
+    if named.is_running():
+        named.restart(capture_output=True)
 def uninstall():
FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org
To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org

Reply via email to