URL: https://github.com/freeipa/freeipa/pull/531
Title: #531: httpinstance: disable system trust module in /etc/httpd/alias
MartinBasti commented:
"""
master:
* f037bfa48356a5fb28eebdb76f9dbd5cb461c2d2 httpinstance: disable system trust
module in /etc/httpd/alias
"""
See the full comment at
URL: https://github.com/freeipa/freeipa/pull/531
Title: #531: httpinstance: disable system trust module in /etc/httpd/alias
stlaz commented:
"""
I rebased your patchset on current master and put the uninstallation of
`ipa_memcached` into a multipass block and all seems to work now.
"""
See
URL: https://github.com/freeipa/freeipa/pull/531
Title: #531: httpinstance: disable system trust module in /etc/httpd/alias
stlaz commented:
"""
It seems to work fine for "mod_nss" reinstalls but `ipa-server-upgrade` is
currently failing so I can't confirm that's ok.
"""
See the full comment
URL: https://github.com/freeipa/freeipa/pull/531
Title: #531: httpinstance: disable system trust module in /etc/httpd/alias
stlaz commented:
"""
It seems to work fine for "mod_nss" reinstalls but `ipa-server-upgrade` is
currently failing so I can't confirm that's ok.
"""
See the full comment
URL: https://github.com/freeipa/freeipa/pull/531
Title: #531: httpinstance: disable system trust module in /etc/httpd/alias
HonzaCholasta commented:
"""
The conflict between master and replica exists because on the master, client
install is executed last, but on (domain level 1+) replica it is
URL: https://github.com/freeipa/freeipa/pull/531
Title: #531: httpinstance: disable system trust module in /etc/httpd/alias
rcritten commented:
"""
Just FYI I'm opening an upstream discussion with the NSS team on this. It is
very strange that there is a conflict like this, particularly between
URL: https://github.com/freeipa/freeipa/pull/531
Title: #531: httpinstance: disable system trust module in /etc/httpd/alias
HonzaCholasta commented:
"""
Yes. That is, once https://pagure.io/freeipa/issue/4639 is fixed.
"""
See the full comment at
URL: https://github.com/freeipa/freeipa/pull/531
Title: #531: httpinstance: disable system trust module in /etc/httpd/alias
HonzaCholasta commented:
"""
Updated to use `modutil -disable` which works even on mod_nss reinstall.
"""
See the full comment at
