Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[4.5] upgrade: add missing DN suffix when enabling KDC proxy #767

Closed
wants to merge 3 commits into from

Conversation

tkrizek
Copy link
Contributor

@tkrizek tkrizek commented May 9, 2017

Original PR: #752


This issue prevented from upgrading from IPA 4.1.

I also discovered a missing python dependency when I was running the ipa-server-upgrade manually. For packagers: the Python version that has the required symbols in CentOS is 2.7.5-24

https://pagure.io/freeipa/issue/6920

Tomas Krizek added 3 commits May 9, 2017 08:16
Commit dfd560a started to use
ssl symbols like ssl.OP_NO_SSLv2 that were introduced in Python 2.7.9.

Related https://pagure.io/freeipa/issue/6920
The typo would result in incorrect resolution of existing keys and
their existence wasn't properly logged as intended.

Related https://pagure.io/freeipa/issue/6920
During an upgrade, http.suffix is used to identify ldap entry when
configuring kdc proxy. When the suffix is missing, the script crashed
when enabling KDC proxy, because it used invalid DN.

Fixes https://pagure.io/freeipa/issue/6920
@martbab martbab self-assigned this May 9, 2017
@martbab martbab added the ack Pull Request approved, can be merged label May 9, 2017
@martbab
Copy link
Contributor

martbab commented May 9, 2017

ipa-4-5:

  • cdefa30 python2-ipalib: add missing python dependency
  • 1662b0e installer service: fix typo in service entry
  • d10d506 upgrade: add missing suffix to http instance

@martbab martbab added the pushed Pull Request has already been pushed label May 9, 2017
@martbab martbab closed this May 9, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
ack Pull Request approved, can be merged pushed Pull Request has already been pushed
Projects
None yet
2 participants