Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix ipa.service unit re. gssproxy #508

Closed
wants to merge 1 commit into from

Conversation

flo-renaud
Copy link
Contributor

@flo-renaud flo-renaud commented Feb 24, 2017

ipa.service unit defines Requires=gssproxy. Because of this, during
ipa-server-upgrade, the restart of gssproxy triggers a restart of ipa unit
(hence stopping LDAP server and breaking the connection api.Backend.ldap2).
Calls using this connection after gssproxy restart fail and ipa-server-upgrade
exits on failure.
The fix defines Wants=gssproxy to avoid the restart of ipa.service

https://fedorahosted.org/freeipa/ticket/6705

ipa.service unit defines Requires=gssproxy. Because of this, during
ipa-server-upgrade, the restart of gssproxy triggers a restart of ipa unit
(hence stopping LDAP server and breaking the connection api.Backend.ldap2).
Calls using this connection after gssproxy restart fail and ipa-server-upgrade
exits on failure.
The fix defines Wants=gssproxy to avoid the restart of ipa.service

https://fedorahosted.org/freeipa/ticket/6705
@abbra
Copy link
Contributor

abbra commented Feb 25, 2017

LGTM. Thank you finding and fixing this issue.

@abbra abbra self-requested a review February 25, 2017 07:49
@abbra abbra added the ack Pull Request approved, can be merged label Feb 25, 2017
@simo5
Copy link
Contributor

simo5 commented Feb 27, 2017

Should we also change the Requires on network.target ?
Do we really want to have a restart of IPa if someone restarts the network ?

@abbra
Copy link
Contributor

abbra commented Feb 27, 2017

Good point. I think we shouldn't restart ourselves as we anyway are listening on all interfaces with 0.0.0.0.

@flo-renaud
Copy link
Contributor Author

@simo5 @abbra I agree but this should be tracked in a separate issue.

@simo5
Copy link
Contributor

simo5 commented Feb 27, 2017

Seemed worth fixing at the same time, but I won't insist.

@MartinBasti
Copy link
Contributor

master:

  • 98e3b14 Fix ipa.service unit re. gssproxy

@MartinBasti MartinBasti added the pushed Pull Request has already been pushed label Mar 1, 2017
@MartinBasti MartinBasti closed this Mar 1, 2017
@flo-renaud flo-renaud deleted the t6705 branch March 14, 2017 07:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
ack Pull Request approved, can be merged pushed Pull Request has already been pushed
Projects
None yet
5 participants