Re: [Freeipa-devel] [PATCH] 1068 wait for LDAP when renewing the RA

2012-11-01 Thread Jan Cholasta
Hi, On 24.10.2012 21:24, Rob Crittenden wrote: All the certs are pretty critical in certificate renewal but the agent cert has the distinction of having to be updated in multiple places. It needs to exist in both LDAP servers. It is possible that one or both of these servers may be down

Re: [Freeipa-devel] [PATCH] 1068 wait for LDAP when renewing the RA

2012-11-01 Thread Rob Crittenden
Jan Cholasta wrote: Hi, On 24.10.2012 21:24, Rob Crittenden wrote: All the certs are pretty critical in certificate renewal but the agent cert has the distinction of having to be updated in multiple places. It needs to exist in both LDAP servers. It is possible that one or both of these

Re: [Freeipa-devel] [PATCH] 1068 wait for LDAP when renewing the RA

2012-11-01 Thread Jan Cholasta
On 1.11.2012 16:32, Rob Crittenden wrote: Jan Cholasta wrote: Hi, On 24.10.2012 21:24, Rob Crittenden wrote: All the certs are pretty critical in certificate renewal but the agent cert has the distinction of having to be updated in multiple places. It needs to exist in both LDAP servers. It

Re: [Freeipa-devel] [PATCH] 1068 wait for LDAP when renewing the RA

2012-11-01 Thread Rob Crittenden
Jan Cholasta wrote: On 1.11.2012 16:32, Rob Crittenden wrote: Jan Cholasta wrote: Hi, On 24.10.2012 21:24, Rob Crittenden wrote: All the certs are pretty critical in certificate renewal but the agent cert has the distinction of having to be updated in multiple places. It needs to exist in

Re: [Freeipa-devel] [PATCH] 1068 wait for LDAP when renewing the RA

2012-11-01 Thread Rob Crittenden
Jan Cholasta wrote: On 1.11.2012 16:54, Rob Crittenden wrote: Jan Cholasta wrote: On 1.11.2012 16:32, Rob Crittenden wrote: Jan Cholasta wrote: Hi, On 24.10.2012 21:24, Rob Crittenden wrote: All the certs are pretty critical in certificate renewal but the agent cert has the distinction of

Re: [Freeipa-devel] [PATCH] 1068 wait for LDAP when renewing the RA

2012-11-01 Thread Jan Cholasta
On 1.11.2012 16:54, Rob Crittenden wrote: Jan Cholasta wrote: On 1.11.2012 16:32, Rob Crittenden wrote: Jan Cholasta wrote: Hi, On 24.10.2012 21:24, Rob Crittenden wrote: All the certs are pretty critical in certificate renewal but the agent cert has the distinction of having to be updated