When do server role upgrade from ipa-client to ipa-server via ipa-replica-install a dirsrv service fails to restart after obtaining keytab from main server. Previous dirsrv service restart in the same script was OK.
possible reason: file freeipa/ipaplatform/altlinux/tasks.py doesn't contain all of the extensions of classes defined in freeipa/ipaplatform/base/tasks.py Especially undefined are: def insert_ca_certs_into_systemwide_ca_store(self, ca_certs): """ Adds CA certificates from 'ca_certs' to the systemwide CA store (if available on the platform). Returns True if the operation succeeded, False otherwise. """ return True def remove_ca_certs_from_systemwide_ca_store(self): """ Removes IPA CA certificates from the systemwide CA store (if available on the platform). Returns True if the operation succeeded, False otherwise. """ return True
freeipa-4.3.3-alt4 -> sisyphus: Thu Aug 10 2017 Mikhail Efremov <sem@altlinux.org> 4.3.3-alt4 - Add %apache_conf_dir macro. - Move ipa_configured script to server-common subpackage. - Init argument for slapi_pblock_get() (closes: #33538). - Fix httpd2 configuration (closes: #33513, #33466).
На p8 по состоянию на 21.09 у jenya@ не получается запустить репликацию.
freeipa-4.3.3-alt8 -> sisyphus: Wed Sep 27 2017 Mikhail Efremov <sem@altlinux.org> 4.3.3-alt8 - Fix replica creation (closes: #33513): + Don't try to use bundled urllib3 in the python-module-request. + Use ipa CA certificate for https checks.
Бага на p8, а исправлена пока в Sisyphus. Ждем исправленя в p8
[#188974] p8 TESTED freeipa.git=4.3.3-alt7.M80P.1
freeipa-4.3.3-alt7.M80P.1 -> p8: Wed Sep 27 2017 Mikhail Efremov <sem@altlinux.org> 4.3.3-alt7.M80P.1 - Build for p8. Wed Sep 27 2017 Mikhail Efremov <sem@altlinux.org> 4.3.3-alt8 - Fix replica creation (closes: #33513): + Don't try to use bundled urllib3 in the python-module-request. + Use ipa CA certificate for https checks.
