From fec0e8360bbd2ead6eb522348ed2b05bd6fdf7bb Mon Sep 17 00:00:00 2001

From: Petr Spacek <pspacek@redhat.com>

Date: Mon, 31 Aug 2015 18:03:33 +0200

Subject: [PATCH] DNSSEC: Fix HSM synchronization in ipa-dnskeysyncd when

 running on DNSSEC key master

https://fedorahosted.org/freeipa/ticket/5273

Reviewed-By: Martin Basti <mbasti@redhat.com>

Reviewed-By: Oleg Fayans <ofayans@redhat.com>

---

 ipapython/dnssec/keysyncer.py | 2 +-

 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ipapython/dnssec/keysyncer.py b/ipapython/dnssec/keysyncer.py

index 837602fb4e7c74a7099a351c727d1435b5645706..de5b5aa5f670db4c58fb92b989e181d45d887b55 100644

--- a/ipapython/dnssec/keysyncer.py

+++ b/ipapython/dnssec/keysyncer.py

@@ -177,4 +177,4 @@ class KeySyncer(SyncReplConsumer):

             return

         if not self.init_done:

             return

-        ipautil.run([paths.ODS_SIGNER])

+        ipautil.run([paths.ODS_SIGNER, 'ipa-hsm-update'])

-- 

2.5.1