[Freeipa-devel] [freeipa PR#41] Postpone enabling LDAPS in replica promotion (comment)

2016-08-31 Thread mbasti-rh
mbasti-rh commented on a pull request

"""
Reverted.

master:
https://fedorahosted.org/freeipa/changeset/dd02741896844a6e14d60f267d9b1cb27b039241


"""

See the full comment at 
https://github.com/freeipa/freeipa/pull/41#issuecomment-243775352
-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#41] Postpone enabling LDAPS in replica promotion (comment)

2016-08-31 Thread jcholast
jcholast commented on a pull request

"""
`ipa-replica-install` fails with:
```
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 
448, in start_creation
run_step(full_msg, method)
  File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 
438, in run_step
method()
  File "/usr/lib/python2.7/site-packages/ipaserver/install/dsinstance.py", line 
786, in __enable_ssl
self.nickname, self.fqdn, cadb)
  File "/usr/lib/python2.7/site-packages/ipaserver/install/certs.py", line 336, 
in create_server_cert
cdb.issue_server_cert(self.certreq_fname, self.certder_fname)
  File "/usr/lib/python2.7/site-packages/ipaserver/install/certs.py", line 405, 
in issue_server_cert
self.secdir, password, "ipaCert", **params)
  File "/usr/lib/python2.7/site-packages/ipapython/dogtag.py", line 156, in 
https_request
method=method, headers=headers)
  File "/usr/lib/python2.7/site-packages/ipapython/dogtag.py", line 207, in 
_httplib_request
raise NetworkError(uri=uri, error=str(e))
NetworkError: cannot connect to 
'https://vm-058-011.abc.idm.lab.eng.brq.redhat.com:8443/ca/ee/ca/profileSubmitSSLClient':
 (SEC_ERROR_BUSY) NSS could not shutdown. Objects are still in use.
```
"""

See the full comment at 
https://github.com/freeipa/freeipa/pull/41#issuecomment-243770659
-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#41] Postpone enabling LDAPS in replica promotion (comment)

2016-08-31 Thread jcholast
jcholast commented on a pull request

"""
However, I don't think this should block the release of 4.4.1, so I would just 
revert 89de60c5d8ba64d619101a7498b8c4469b6e50ae and keep the ticket open.
"""

See the full comment at 
https://github.com/freeipa/freeipa/pull/41#issuecomment-243771692
-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code